Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-61123 |
medium | 4.2 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operat | |
CVE-2026-70916 |
medium | 4.0 | 0.0018 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70917 |
medium | 4.0 | 0.0018 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-91404 |
medium | 4.0 | 0.0016 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-60814 |
low | 3.9 | 0.0011 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi | |
CVE-2026-60887 |
low | 3.8 | 0.0012 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data | |
CVE-2026-60405 |
low | 3.8 | 0.0015 | 2026-07-21 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (comp | |
CVE-2026-60819 |
low | 3.7 | 0.0025 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Appl | |
CVE-2026-83376 |
low | 3.7 | 0.0025 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-87340 |
low | 3.7 | 0.0024 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port | |
CVE-2026-87367 |
low | 3.7 | 0.0025 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-87389 |
low | 3.7 | 0.0024 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edward | |
CVE-2026-87416 |
low | 3.7 | 0.0026 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Repo | |
CVE-2026-91334 |
low | 3.7 | 0.0021 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-91363 |
low | 3.7 | 0.0026 | 2026-10-20 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-91650 |
low | 3.7 | 0.0027 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affec | |
CVE-2023-28322 |
low | 3.7 | 0.0221 | 2023-05-26 | An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl | |
CVE-2026-46584 |
low | 3.7 | 0.0056 | 2026-07-06 | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor vulnerability | |
CVE-2026-60352 |
low | 3.7 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). | |
CVE-2026-60354 |
low | 3.7 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualiz | |
CVE-2026-60919 |
low | 3.7 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal | |
CVE-2026-61015 |
low | 3.7 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-61104 |
low | 3.7 | 0.0027 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (componen | |
CVE-2026-55403 |
low | 3.7 | 0.0034 | 2026-07-28 | datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/ | |
CVE-2026-71849 |
low | 3.7 | 0.0036 | 2026-08-07 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to | |
CVE-2026-60589 |
low | 3.7 | 0.0027 | 2026-08-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-60853 |
low | 3.7 | 0.0027 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-91616 |
low | 3.7 | 0.0022 | 2026-10-20 | Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middlewar | |
CVE-2026-108686 |
low | 3.7 | 0.0016 | 2026-10-29 | The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it retu | |
CVE-2026-87333 |
low | 3.6 | 0.0011 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-60896 |
low | 3.6 | 0.0013 | 2026-07-21 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal | |
CVE-2026-11985 |
low | 3.6 | 0.0013 | 2026-08-11 | On the Zephyr ARM port, enabling the hardware FPU (CONFIG_FPU) forces the "Floating point ABI" choic | |
CVE-2026-101846 |
low | 3.5 | 0.0018 | 2026-10-20 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Opera | |
CVE-2026-17902 |
low | 3.5 | 0.0024 | 2026-07-30 | Inappropriate implementation in Editing in Google Chrome on Linux prior to 151.0.7922.72 allowed a r | |
CVE-2026-115449 |
low | 3.5 | 0.0024 | 2026-10-22 | A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to m | |
CVE-2026-87331 |
low | 3.4 | 0.0014 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev | |
CVE-2026-42195 |
low | 3.4 | 0.0019 | 2026-05-08 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.9, the dr | |
CVE-2026-87401 |
low | 3.3 | 0.0015 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML | |
CVE-2026-91249 |
low | 3.3 | 0.0014 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supporte | |
CVE-2026-91322 |
low | 3.3 | 0.0014 | 2026-10-20 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDevel | |
CVE-2026-82983 |
low | 3.3 | 0.0011 | 2026-10-27 | The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that | |
CVE-2026-50416 |
low | 3.3 | 0.0046 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized at | 2 PoC |
CVE-2026-50419 |
low | 3.3 | 0.0046 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized at | |
CVE-2026-0747 |
low | 3.3 | 0.0020 | 2026-01-08 | Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote | |
CVE-2026-15642 |
low | 3.3 | 0.0015 | 2026-07-14 | Insertion of sensitive information into a file in the Recovery Kit response file generation feature | |
CVE-2026-60318 |
low | 3.3 | 0.0015 | 2026-07-21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset | |
CVE-2026-91612 |
low | 3.3 | 0.0011 | 2026-10-20 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communicat | |
CVE-2026-91613 |
low | 3.3 | 0.0011 | 2026-10-20 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communicat | |
CVE-2026-91614 |
low | 3.3 | 0.0011 | 2026-10-20 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communicat | |
CVE-2026-46815 |
low | 3.2 | 0.0016 | 2026-06-17 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device |