Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-76306 |
high | 7.5 | 0.0022 | 2026-10-21 | In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in | |
CVE-2026-56833 |
high | 7.5 | 0.0046 | 2026-10-23 | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dy | |
CVE-2026-56834 |
high | 7.5 | 0.0037 | 2026-10-23 | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dy | |
CVE-2026-57146 |
high | 7.5 | 0.0034 | 2026-10-23 | PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the publishe | |
CVE-2026-118759 |
high | 7.5 | — | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. | |
CVE-2026-104596 |
high | 7.5 | 0.0023 | 2026-10-26 | libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service compo | |
CVE-2026-83367 |
high | 7.4 | 0.0032 | 2026-10-20 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workfl | |
CVE-2026-41615 |
high | 7.4 | 0.0056 | 2026-05-14 | Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unau | |
CVE-2026-45539 |
high | 7.4 | 0.0065 | 2026-05-15 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. From 0.5.4 to 0. | |
CVE-2026-44460 |
high | 7.4 | 0.0033 | 2026-05-27 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operatio | |
CVE-2026-61185 |
high | 7.4 | 0.0034 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-54660 |
high | 7.4 | 0.0031 | 2026-07-29 | swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior t | |
CVE-2026-42498 |
high | 7.3 | 0.0065 | 2026-05-12 | Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerabi | |
CVE-2026-61267 |
high | 7.3 | 0.0031 | 2026-07-21 | Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (componen | |
CVE-2026-87357 |
high | 7.2 | 0.0046 | 2026-10-20 | Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operation | |
CVE-2026-35140 |
high | 7.2 | 0.0028 | 2026-07-16 | HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnera | |
CVE-2026-54605 |
high | 7.2 | 0.0019 | 2026-07-28 | OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. From 0. | |
CVE-2026-76307 |
high | 7.2 | 0.0040 | 2026-10-21 | In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permissi | |
CVE-2026-112188 |
high | 7.1 | 0.0027 | 2026-10-19 | MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated u | |
CVE-2026-101851 |
high | 7.1 | 0.0023 | 2026-10-20 | Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI) | |
CVE-2026-87307 |
high | 7.1 | 0.0038 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interop | |
CVE-2026-87308 |
high | 7.1 | 0.0015 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-87358 |
high | 7.1 | 0.0030 | 2026-10-20 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-54304 |
high | 7.1 | 0.0038 | 2026-06-23 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authen | |
CVE-2026-56244 |
high | 7.1 | 0.0024 | 2026-06-24 | Capgo before 12.128.2 allows non-admin API keys to read webhook signing secrets via Supabase REST du | |
CVE-2026-59209 |
high | 7.1 | 0.0040 | 2026-07-09 | n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authe | |
CVE-2026-55651 |
high | 7.1 | 0.0023 | 2026-07-14 | Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposu | |
CVE-2026-60176 |
high | 7.1 | 0.0042 | 2026-07-21 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmissio | |
CVE-2026-60449 |
high | 7.1 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60647 |
high | 7.1 | 0.0038 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-61165 |
high | 7.1 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-62565 |
high | 7.1 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year | |
CVE-2026-73604 |
high | 7.1 | 0.0041 | 2026-08-13 | Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/cr | |
CVE-2026-109341 |
high | 7.1 | 0.0026 | 2026-10-12 | SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table | |
CVE-2026-74047 |
high | 7.1 | 0.0032 | 2026-10-13 | Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-priv | |
CVE-2026-95712 |
high | 7.1 | 0.0024 | 2026-10-22 | A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauth | |
CVE-2026-60705 |
high | 7.0 | 0.0029 | 2026-07-21 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-87338 |
medium | 6.9 | 0.0024 | 2026-10-20 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supporte | |
CVE-2026-113705 |
medium | 6.9 | 0.0033 | 2026-10-20 | A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown pro | |
CVE-2026-114657 |
medium | 6.9 | 0.0022 | 2026-10-22 | Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page autho | |
CVE-2026-116193 |
medium | 6.9 | 0.0025 | 2026-10-25 | Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav tha | |
CVE-2026-116478 |
medium | 6.9 | 0.0043 | 2026-10-26 | A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecu | |
CVE-2025-40940 |
medium | 6.9 | 0.0037 | 2025-12-09 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected applica | |
CVE-2026-42871 |
medium | 6.9 | 0.0025 | 2026-05-11 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiar_do | |
CVE-2026-41954 |
medium | 6.9 | 0.0029 | 2026-05-13 | Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and | |
CVE-2026-56235 |
medium | 6.9 | 0.0035 | 2026-06-20 | Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgREST RPC func | |
CVE-2026-7167 |
medium | 6.9 | 0.0057 | 2026-06-22 | The vulnerability arises when the system fails to properly validate the 'email' field during the aut | |
CVE-2026-56284 |
medium | 6.9 | 0.0028 | 2026-07-08 | Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabas | |
CVE-2026-57474 |
medium | 6.9 | 0.0051 | 2026-07-10 | Deloitte AI Assist for Customer disclosed some configuration information through public-facing API e | |
CVE-2026-59155 |
medium | 6.9 | 0.0039 | 2026-07-10 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Prio |