Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-60662 |
high | 7.8 | 0.0015 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported | |
CVE-2026-87356 |
high | 7.8 | 0.0015 | 2026-10-20 | Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component | |
CVE-2026-50697 |
high | 7.8 | 0.0040 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver | |
CVE-2026-60413 |
high | 7.8 | 0.0019 | 2026-08-18 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-60414 |
high | 7.8 | 0.0019 | 2026-08-18 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91636 |
high | 7.7 | 0.0039 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-91639 |
high | 7.7 | 0.0039 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-91661 |
high | 7.7 | 0.0032 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-34242 |
high | 7.7 | 0.0046 | 2026-04-15 | Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feature didn't | |
CVE-2026-34839 |
high | 7.7 | 0.0041 | 2026-04-21 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Glances | |
CVE-2026-40885 |
high | 7.7 | 0.0031 | 2026-04-21 | goshs is a SimpleHTTPServer written in Go. From 2.0.0-beta.4 to 2.0.0-beta.5, goshs leaks file-based | |
CVE-2026-41266 |
high | 7.7 | 0.0406 | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3. | |
CVE-2026-44738 |
high | 7.7 | 0.0028 | 2026-05-11 | Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user | |
CVE-2026-43885 |
high | 7.7 | 0.0034 | 2026-05-11 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, an unauthenticat | |
CVE-2026-49853 |
high | 7.7 | 0.0044 | 2026-07-14 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHT | |
CVE-2026-60440 |
high | 7.7 | 0.0039 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60548 |
high | 7.7 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Bu | |
CVE-2026-60923 |
high | 7.7 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operati | |
CVE-2026-61014 |
high | 7.7 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Inte | |
CVE-2026-61125 |
high | 7.7 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply | |
CVE-2026-62560 |
high | 7.7 | 0.0035 | 2026-07-21 | Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Op | |
CVE-2026-62567 |
high | 7.7 | 0.0035 | 2026-07-21 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). S | |
CVE-2026-55729 |
high | 7.7 | 0.0054 | 2026-07-24 | Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 bef | |
CVE-2026-67357 |
high | 7.7 | 0.0042 | 2026-08-02 | ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP get_serve | |
CVE-2026-60969 |
high | 7.7 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co | |
CVE-2026-70942 |
high | 7.7 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-73137 |
high | 7.7 | 0.0053 | 2026-08-20 | A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Mana | |
CVE-2026-91632 |
high | 7.7 | 0.0030 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-101849 |
high | 7.6 | 0.0027 | 2026-10-20 | Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Insta | |
CVE-2026-54317 |
high | 7.6 | 0.0031 | 2026-06-23 | Home Assistant is open source home automation software that puts local control and privacy first. Pr | |
CVE-2026-60886 |
high | 7.6 | 0.0015 | 2026-07-21 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal | |
CVE-2026-62518 |
high | 7.6 | 0.0032 | 2026-07-21 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Int | |
CVE-2026-48766 |
high | 7.6 | 0.0043 | 2026-08-11 | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a | |
CVE-2026-48767 |
high | 7.6 | 0.0043 | 2026-08-11 | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a | |
CVE-2026-101847 |
high | 7.5 | 0.0034 | 2026-10-20 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Interna | |
CVE-2026-83370 |
high | 7.5 | 0.0034 | 2026-10-20 | Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions). Supported v | |
CVE-2026-87363 |
high | 7.5 | 0.0034 | 2026-10-20 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-91307 |
high | 7.5 | 0.0030 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-91308 |
high | 7.5 | 0.0030 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-91325 |
high | 7.5 | 0.0040 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-85891 |
high | 7.5 | 0.0092 | 2026-10-13 | Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized | |
CVE-2023-29106 |
high | 7.5 | 0.0072 | 2023-05-09 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), | |
CVE-2026-6756 |
high | 7.5 | 0.0027 | 2026-04-21 | Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150. | |
CVE-2026-6782 |
high | 7.5 | 0.0025 | 2026-04-21 | Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 150 a | |
CVE-2026-34297 |
high | 7.5 | 0.0032 | 2026-04-21 | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: K | |
CVE-2026-34305 |
high | 7.5 | 0.0033 | 2026-04-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Serv | |
CVE-2026-43646 |
high | 7.5 | 0.0039 | 2026-05-06 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket. This iss | |
CVE-2026-42826 |
high | 7.5 | 0.0084 | 2026-05-07 | Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized at | |
CVE-2026-28962 |
high | 7.5 | 0.0040 | 2026-05-11 | This issue was addressed with improved access restrictions. This issue is fixed in Safari 26.5, iOS | |
CVE-2026-28976 |
high | 7.5 | 0.0030 | 2026-05-11 | An information leakage was addressed with additional validation. This issue is fixed in macOS Tahoe |