Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-46410 |
high | 8.7 | 0.0044 | 2026-07-20 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable a | |
CVE-2026-47394 |
high | 8.7 | 0.0050 | 2026-07-21 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GHSA-9mqq-jqxf-grvw / | |
CVE-2026-60553 |
high | 8.7 | 0.0034 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-47743 |
high | 8.7 | 0.0038 | 2026-07-23 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewir | |
CVE-2026-67322 |
high | 8.7 | 0.0033 | 2026-08-01 | GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). The | |
CVE-2026-67343 |
high | 8.7 | 0.0051 | 2026-08-01 | ArcadeDB versions before 26.7.2 fail to properly redact the cluster token in the GET /api/v1/server | |
CVE-2026-73622 |
high | 8.7 | 0.0051 | 2026-08-13 | GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submo | |
CVE-2026-75915 |
high | 8.7 | 0.0068 | 2026-08-18 | CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the js_ex | |
CVE-2026-88893 |
high | 8.7 | 0.0049 | 2026-09-10 | OpenPanel through 2.3.0 share lookup procedures fail to validate access controls and return password | |
CVE-2026-53920 |
high | 8.7 | 0.0040 | 2026-10-23 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 | |
CVE-2026-55826 |
high | 8.7 | 0.0034 | 2026-10-23 | The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From v | |
CVE-2026-91353 |
high | 8.6 | 0.0040 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-42047 |
high | 8.6 | 0.0038 | 2026-05-07 | Inngest is a platform for running event-driven and scheduled background functions with queueing, ret | |
CVE-2026-60293 |
high | 8.6 | 0.0044 | 2026-07-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - We | |
CVE-2026-60431 |
high | 8.6 | 0.0044 | 2026-07-21 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy). | |
CVE-2026-60550 |
high | 8.6 | 0.0041 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-60556 |
high | 8.6 | 0.0044 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-54603 |
high | 8.6 | 0.0045 | 2026-07-28 | OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connec | |
CVE-2026-48007 |
high | 8.6 | 0.0025 | 2026-08-07 | Element Call is a native Matrix video conferencing application. Versions 0.5.17 through 0.19.3 repor | |
CVE-2026-59499 |
high | 8.6 | 0.0042 | 2026-08-13 | : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Genera | |
CVE-2026-100640 |
high | 8.6 | 0.0024 | 2026-09-26 | SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows re | |
CVE-2026-91219 |
high | 8.6 | 0.0030 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-91217 |
high | 8.6 | 0.0040 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-96626 |
high | 8.5 | 0.0022 | 2026-10-16 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0 | |
CVE-2026-10055 |
high | 8.5 | 0.0040 | 2026-07-03 | In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts an attacker | |
CVE-2026-57485 |
high | 8.5 | 0.0042 | 2026-08-17 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. P | |
CVE-2026-87301 |
high | 8.4 | 0.0015 | 2026-10-20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-116819 |
high | 8.4 | 0.0030 | 2026-10-27 | OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level proje | |
CVE-2026-33981 |
high | 8.3 | 0.0048 | 2026-03-27 | changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, the `jq:` | |
CVE-2026-55882 |
high | 8.3 | 0.0052 | 2026-07-10 | Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.19.5 through 0.37. | |
CVE-2026-62473 |
high | 8.3 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite | |
CVE-2026-67436 |
high | 8.3 | 0.0042 | 2026-07-29 | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related mo | |
CVE-2026-70473 |
high | 8.3 | 0.0045 | 2026-08-04 | Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. | |
CVE-2026-50429 |
high | 8.2 | 0.0107 | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a | |
CVE-2026-42564 |
high | 8.2 | 0.0116 | 2026-05-11 | jotty·page is a self-hosted app for your checklists and notes. Prior to 1.22.0, an unauthenticated p | |
CVE-2026-53571 |
high | 8.2 | 0.0058 | 2026-06-22 | Vite is a frontend tooling framework for JavaScript. Prior to 8.0.16, 7.3.5, and 6.4.3, the contents | |
CVE-2026-15075 |
high | 8.2 | 0.0020 | 2026-07-14 | In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRe | |
CVE-2026-35142 |
high | 8.2 | 0.0032 | 2026-07-16 | HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application inc | |
CVE-2026-21579 |
high | 8.2 | 0.0044 | 2026-07-21 | This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8 | |
CVE-2026-61240 |
high | 8.2 | 0.0032 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft | |
CVE-2026-65758 |
high | 8.2 | 0.0031 | 2026-07-23 | Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The | |
CVE-2026-48771 |
high | 8.2 | 0.0035 | 2026-08-11 | ishankportfolio is a portfolio website. Prior to version 1.0.1, contact form submissions could poten | |
CVE-2026-111756 |
high | 8.2 | 0.0047 | 2026-10-20 | follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. Fr | |
CVE-2026-87306 |
high | 8.1 | 0.0037 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interop | |
CVE-2026-60558 |
high | 8.1 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-60844 |
high | 8.1 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite (component: Update S | |
CVE-2026-60415 |
high | 8.1 | 0.0042 | 2026-08-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-70943 |
high | 8.1 | 0.0037 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-60371 |
high | 8.0 | 0.0027 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-48080 |
high | 8.0 | 0.0047 | 2026-08-06 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl |