Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-46977 |
low | 3.2 | 0.0016 | 2026-06-17 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device | |
CVE-2026-47043 |
low | 3.2 | 0.0017 | 2026-07-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-60160 |
low | 3.2 | 0.0017 | 2026-07-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-101844 |
low | 3.1 | 0.0023 | 2026-10-20 | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Con | |
CVE-2026-101845 |
low | 3.1 | 0.0018 | 2026-10-20 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Opera | |
CVE-2026-83392 |
low | 3.1 | 0.0023 | 2026-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diag | |
CVE-2026-87339 |
low | 3.1 | 0.0023 | 2026-10-20 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Support | |
CVE-2026-91261 |
low | 3.1 | 0.0023 | 2026-10-20 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-59180 |
low | 3.1 | 0.0030 | 2026-07-10 | Apprise is an open source library which allows you to send a notification to almost all of the most | |
CVE-2026-35145 |
low | 3.1 | 0.0027 | 2026-07-16 | HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The a | |
CVE-2026-56579 |
low | 3.1 | 0.0025 | 2026-07-21 | HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misu | |
CVE-2026-60339 |
low | 3.1 | 0.0025 | 2026-07-21 | Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM | |
CVE-2026-60922 |
low | 3.1 | 0.0025 | 2026-07-21 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal | |
CVE-2026-60930 |
low | 3.1 | 0.0025 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: | |
CVE-2026-60939 |
low | 3.1 | 0.0025 | 2026-07-21 | Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Interna | |
CVE-2026-83373 |
low | 3.0 | 0.0021 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port | |
CVE-2026-87332 |
low | 3.0 | 0.0012 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev | |
CVE-2026-22007 |
low | 2.9 | 0.0012 | 2026-04-21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-34268 |
low | 2.9 | 0.0012 | 2026-04-21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-7041 |
low | 2.9 | 0.0041 | 2026-04-26 | A vulnerability was detected in 666ghj MiroFish up to 0.1.2. The impacted element is an unknown func | |
CVE-2026-8028 |
low | 2.9 | 0.0040 | 2026-05-06 | A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of | |
CVE-2026-73964 |
low | 2.7 | 0.0030 | 2026-10-20 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte | |
CVE-2026-87412 |
low | 2.7 | 0.0031 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Repo | |
CVE-2026-110507 |
low | 2.7 | 0.0024 | 2026-10-28 | The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not restrict the query arguments | |
CVE-2026-113494 |
low | 2.7 | 0.0024 | 2026-10-28 | The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check whe | |
CVE-2026-34518 |
low | 2.7 | 0.0035 | 2026-04-01 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.1 | |
CVE-2026-5375 |
low | 2.7 | 0.0020 | 2026-04-07 | An issue that could allow a user with access to a credential to view sensitive fields through an API | |
CVE-2026-22001 |
low | 2.7 | 0.0026 | 2026-04-21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). | |
CVE-2026-6392 |
low | 2.7 | 0.0019 | 2026-04-22 | Tanium addressed an information disclosure vulnerability in Threat Response. | |
CVE-2026-19406 |
low | 2.7 | 0.0032 | 2026-08-19 | The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listing | |
CVE-2026-87418 |
low | 2.5 | 0.0010 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Upda | |
CVE-2026-18011 |
low | 2.4 | 0.0013 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe | |
CVE-2026-34969 |
low | 2.3 | 0.0027 | 2026-04-06 | Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth | |
CVE-2026-22051 |
low | 2.3 | 0.0018 | 2026-04-20 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible | |
CVE-2026-42865 |
low | 2.3 | 0.0023 | 2026-05-11 | Inbox Zero is an AI personal assistant for email. Prior to 2.29.3, the cleaner email stream endpoint | |
CVE-2026-5266 |
low | 2.3 | 0.0025 | 2026-05-11 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Ech | |
CVE-2026-48855 |
low | 2.3 | 0.0030 | 2026-06-10 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftp | |
CVE-2026-57481 |
low | 2.3 | 0.0053 | 2026-07-08 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node. | |
CVE-2026-119125 |
low | 2.3 | — | 2026-10-29 | Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a field reve | |
CVE-2026-83388 |
low | 2.2 | 0.0025 | 2026-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diag | |
CVE-2026-56578 |
low | 2.2 | 0.0026 | 2026-07-21 | HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit kn | |
CVE-2026-60950 |
low | 2.2 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle HRMS (Ireland) product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-61214 |
low | 2.2 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). S | |
CVE-2026-101397 |
low | 2.2 | 0.0027 | 2026-10-20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S | |
CVE-2026-5847 |
low | 2.1 | 0.0026 | 2026-04-09 | A vulnerability has been found in code-projects Movie Ticketing System 1.0. Impacted is an unknown f | |
CVE-2026-5960 |
low | 2.1 | 0.0026 | 2026-04-09 | A weakness has been identified in code-projects Patient Record Management System 1.0. This affects a | |
CVE-2026-6000 |
low | 2.1 | 0.0026 | 2026-04-10 | A vulnerability was found in code-projects Online Library Management System 1.0. Affected is an unkn | |
CVE-2026-34092 |
low | 2.1 | 0.0024 | 2026-05-11 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Med | |
CVE-2026-58036 |
low | 2.1 | 0.0032 | 2026-07-01 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Med | |
CVE-2026-15329 |
low | 2.1 | 0.0042 | 2026-07-10 | A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserT |