Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1098)
CWE-22 (1025)
CWE-125 (884)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (688)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-60812 |
medium | 6.5 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (compo | |
CVE-2026-60835 |
medium | 6.5 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal | |
CVE-2026-60899 |
medium | 6.5 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (componen | |
CVE-2026-61082 |
medium | 6.5 | 0.0019 | 2026-07-21 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported v | |
CVE-2026-61112 |
medium | 6.5 | 0.0035 | 2026-07-21 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product | |
CVE-2026-61249 |
medium | 6.5 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Impor | |
CVE-2026-61251 |
medium | 6.5 | 0.0039 | 2026-07-21 | Vulnerability in the HRMS (Australia) product of Oracle E-Business Suite (component: Payroll). Supp | |
CVE-2026-62470 |
medium | 6.5 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (compone | |
CVE-2026-62556 |
medium | 6.5 | 0.0035 | 2026-07-21 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operat | |
CVE-2026-66018 |
medium | 6.5 | 0.0045 | 2026-07-27 | Build readers can access another repository's environment properties. A caller with read access to a | |
CVE-2026-17683 |
medium | 6.5 | 0.0047 | 2026-07-30 | Inappropriate implementation in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-17892 |
medium | 6.5 | 0.0032 | 2026-07-30 | Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-17975 |
medium | 6.5 | 0.0032 | 2026-07-30 | Inappropriate implementation in IME in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote | |
CVE-2026-18001 |
medium | 6.5 | 0.0032 | 2026-07-30 | Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-18005 |
medium | 6.5 | 0.0032 | 2026-07-30 | Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-18809 |
medium | 6.5 | 0.0036 | 2026-08-04 | Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was | |
CVE-2026-47364 |
medium | 6.5 | 0.0044 | 2026-08-07 | In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data wi | |
CVE-2026-72539 |
medium | 6.5 | 0.0040 | 2026-08-11 | An information disclosure vulnerability in Windmill Labs Windmill through 1.783.0 allows any authent | |
CVE-2026-65017 |
medium | 6.5 | 0.0039 | 2026-08-12 | Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team de | |
CVE-2026-70975 |
medium | 6.5 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-53959 |
medium | 6.5 | 0.0103 | 2026-08-18 | 4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows any a | |
CVE-2026-53586 |
medium | 6.5 | 0.0028 | 2026-08-20 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a | |
CVE-2026-16964 |
medium | 6.5 | 0.0034 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages an | |
CVE-2026-113157 |
medium | 6.5 | 0.0034 | 2026-10-20 | Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote att | |
CVE-2026-91443 |
medium | 6.5 | 0.0027 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91514 |
medium | 6.5 | 0.0036 | 2026-10-20 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Suppo | |
CVE-2026-91609 |
medium | 6.5 | 0.0037 | 2026-10-20 | Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affec | |
CVE-2026-114623 |
medium | 6.5 | 0.0065 | 2026-10-23 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, | |
CVE-2026-82943 |
medium | 6.5 | 0.0017 | 2026-10-26 | SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages t | |
CVE-2026-77817 |
medium | 6.5 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitiv | |
CVE-2026-87324 |
medium | 6.4 | 0.0024 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-87325 |
medium | 6.4 | 0.0024 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-60620 |
medium | 6.4 | 0.0025 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: | |
CVE-2026-60864 |
medium | 6.4 | 0.0023 | 2026-07-21 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product | |
CVE-2026-87319 |
medium | 6.3 | 0.0012 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-116190 |
medium | 6.3 | 0.0019 | 2026-10-25 | rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV ba | |
CVE-2026-116575 |
medium | 6.3 | 0.0011 | 2026-10-26 | Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2 | |
CVE-2026-31370 |
medium | 6.3 | 0.0019 | 2026-04-21 | Honor E APP is affected by information leak vulnerability, successful exploitation of this vulnerabi | |
CVE-2026-8026 |
medium | 6.3 | 0.0026 | 2026-05-06 | A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Logi | |
CVE-2026-54276 |
medium | 6.3 | 0.0031 | 2026-06-22 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, Dig | |
CVE-2026-15044 |
medium | 6.3 | 0.0021 | 2026-07-08 | A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardra | |
CVE-2026-44979 |
medium | 6.3 | 0.0042 | 2026-07-17 | @hapi/wreck is an HTTP client utility. Prior to 18.1.1, when @hapi/wreck follows a 3xx redirect to a | |
CVE-2026-61117 |
medium | 6.3 | 0.0028 | 2026-07-21 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operat | |
CVE-2026-61216 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Suppor | |
CVE-2026-61266 |
medium | 6.3 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite (component | |
CVE-2026-61279 |
medium | 6.3 | 0.0029 | 2026-07-21 | Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Proposals). Su | |
CVE-2026-61294 |
medium | 6.3 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (compone | |
CVE-2026-61304 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal | |
CVE-2026-62453 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operat | |
CVE-2026-62519 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succe |