Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-62524 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - Ge | |
CVE-2026-62525 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Quality Workbench | |
CVE-2026-62527 |
medium | 6.3 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Impor | |
CVE-2026-62528 |
medium | 6.3 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (componen | |
CVE-2026-73411 |
medium | 6.3 | 0.0059 | 2026-08-12 | Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFuncti | |
CVE-2026-116122 |
medium | 6.3 | 0.0044 | 2026-10-26 | A security flaw has been discovered in NocoDB up to 2026.07.0. Impacted is the function AuthService. | |
CVE-2026-49807 |
medium | 6.2 | 0.0051 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized | |
CVE-2026-57095 |
medium | 6.2 | 0.0049 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized | |
CVE-2025-10536 |
medium | 6.2 | 0.0016 | 2025-09-16 | Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-17966 |
medium | 6.2 | 0.0013 | 2026-07-30 | Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local | |
CVE-2026-54785 |
medium | 6.2 | 0.0019 | 2026-07-31 | gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official | |
CVE-2026-71293 |
medium | 6.2 | 0.0037 | 2026-08-05 | Statamic CMS's user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contain | |
CVE-2026-101850 |
medium | 6.1 | 0.0024 | 2026-10-20 | Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). Suppor | |
CVE-2026-87345 |
medium | 6.1 | 0.0023 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi | |
CVE-2026-60968 |
medium | 6.0 | 0.0016 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Upda | |
CVE-2026-83375 |
medium | 6.0 | 0.0025 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (compone | |
CVE-2026-118666 |
medium | 6.0 | 0.0034 | 2026-10-28 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to vers | |
CVE-2026-54316 |
medium | 6.0 | 0.0052 | 2026-06-23 | Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface. | |
CVE-2026-55792 |
medium | 6.0 | 0.0033 | 2026-07-02 | Craft CMS is a content management system (CMS). In versions starting from 4.0.0-RC1 and prior to 4.1 | |
CVE-2026-67435 |
medium | 6.0 | 0.0050 | 2026-07-29 | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integ | |
CVE-2026-116161 |
medium | 6.0 | 0.0029 | 2026-10-25 | Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulne | |
CVE-2026-60746 |
medium | 5.9 | 0.0024 | 2026-10-20 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product | |
CVE-2026-70860 |
medium | 5.9 | 0.0024 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft | |
CVE-2026-83374 |
medium | 5.9 | 0.0029 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-83387 |
medium | 5.9 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-87290 |
medium | 5.9 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-87326 |
medium | 5.9 | 0.0032 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-87327 |
medium | 5.9 | 0.0018 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-87328 |
medium | 5.9 | 0.0032 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-91309 |
medium | 5.9 | 0.0032 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interop | |
CVE-2026-91317 |
medium | 5.9 | 0.0029 | 2026-10-20 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Databindi | |
CVE-2026-116685 |
medium | 5.9 | 0.0040 | 2026-10-27 | The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers | |
CVE-2026-53725 |
medium | 5.9 | 0.0025 | 2026-06-12 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node. | |
CVE-2026-14062 |
medium | 5.9 | 0.0024 | 2026-06-30 | Inappropriate implementation in Views in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed an | |
CVE-2026-55406 |
medium | 5.9 | 0.0019 | 2026-07-16 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Pri | |
CVE-2026-60266 |
medium | 5.9 | 0.0035 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60349 |
medium | 5.9 | 0.0032 | 2026-07-21 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business | |
CVE-2026-60610 |
medium | 5.9 | 0.0035 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (compone | |
CVE-2026-61103 |
medium | 5.9 | 0.0027 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (compone | |
CVE-2026-91766 |
medium | 5.9 | 0.0029 | 2026-09-25 | When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cook | |
CVE-2026-91394 |
medium | 5.9 | 0.0042 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Ne | |
CVE-2026-119199 |
medium | 5.9 | — | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt develo | |
CVE-2026-60500 |
medium | 5.8 | 0.0032 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web | |
CVE-2026-34318 |
medium | 5.8 | 0.0026 | 2026-04-21 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported | |
CVE-2026-41960 |
medium | 5.8 | 0.0009 | 2026-05-15 | Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may | |
CVE-2024-32387 |
medium | 5.7 | 0.0030 | 2026-07-16 | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacke | |
CVE-2026-105616 |
medium | 5.7 | 0.0019 | 2026-10-28 | PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_ | |
CVE-2026-31951 |
medium | 5.7 | 0.0025 | 2026-03-27 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3-rc1, user | |
CVE-2026-47176 |
medium | 5.7 | 0.0032 | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to | |
CVE-2026-47177 |
medium | 5.7 | 0.0032 | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to |