Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-0063 |
critical | 10.0 | 0.0015 | 2026-06-17 | In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier rest | |
CVE-2026-60366 |
critical | 10.0 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-91250 |
critical | 9.9 | 0.0045 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Su | |
CVE-2026-33821 |
critical | 9.9 | 0.0066 | 2026-05-12 | Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attac | |
CVE-2026-46716 |
critical | 9.9 | 0.0043 | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From | |
CVE-2026-46794 |
critical | 9.9 | 0.0043 | 2026-06-17 | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Gene | |
CVE-2026-46852 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-46893 |
critical | 9.9 | 0.0030 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component | |
CVE-2026-46895 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite ( | |
CVE-2026-46900 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite ( | |
CVE-2026-46901 |
critical | 9.9 | 0.0037 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite ( | |
CVE-2026-46933 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Inte | |
CVE-2026-46964 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work | |
CVE-2026-60663 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-60719 |
critical | 9.9 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). | |
CVE-2026-61076 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSo | |
CVE-2026-61146 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61209 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft In-Memory Project Discovery product of Oracle PeopleSoft (component: | |
CVE-2026-61237 |
critical | 9.9 | 0.0038 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft | |
CVE-2026-60369 |
critical | 9.9 | 0.0047 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-7329 |
critical | 9.9 | 0.0057 | 2026-08-05 | An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces o | |
CVE-2026-8709 |
critical | 9.9 | 0.0046 | 2026-08-05 | An improper privilege management vulnerability in the REST API document patch operation of Progress | |
CVE-2026-9193 |
critical | 9.9 | 0.0046 | 2026-08-05 | An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Serve | |
CVE-2026-48086 |
critical | 9.9 | 0.0044 | 2026-08-06 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl | |
CVE-2026-64637 |
critical | 9.9 | 0.0047 | 2026-08-07 | Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated re | |
CVE-2026-17276 |
critical | 9.9 | 0.0047 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due | |
CVE-2026-73269 |
critical | 9.9 | 0.0056 | 2026-08-12 | A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCur | |
CVE-2026-114612 |
critical | 9.9 | 0.0032 | 2026-10-22 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 un | |
CVE-2026-17145 |
critical | 9.8 | 0.0073 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-14960 |
critical | 9.8 | 0.0046 | 2026-07-15 | Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\ | |
CVE-2026-15982 |
critical | 9.8 | 0.0053 | 2026-07-17 | The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for Word | |
CVE-2026-62183 |
critical | 9.8 | 0.0069 | 2026-07-20 | Improper Privilege Management vulnerability in Apache Syncope. When: * the all-Java user workflow | |
CVE-2026-60532 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-60566 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime | |
CVE-2026-61154 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-60367 |
critical | 9.8 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-60372 |
critical | 9.8 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-40920 |
critical | 9.8 | 0.0073 | 2026-08-10 | Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Users are re | |
CVE-2026-49819 |
critical | 9.8 | 0.0108 | 2026-08-13 | UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentica | |
CVE-2026-50770 |
critical | 9.8 | 0.0061 | 2026-08-17 | An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges | |
CVE-2026-50774 |
critical | 9.8 | 0.0061 | 2026-08-17 | An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Ma | |
CVE-2026-70817 |
critical | 9.8 | 0.0051 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-115214 |
critical | 9.8 | 0.0028 | 2026-10-25 | The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity | |
CVE-2026-113616 |
critical | 9.8 | — | 2026-10-29 | The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code t | |
CVE-2026-46899 |
critical | 9.6 | 0.0034 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite ( | |
CVE-2026-14101 |
critical | 9.6 | 0.0033 | 2026-06-30 | Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a | |
CVE-2026-47413 |
critical | 9.6 | 0.0026 | 2026-07-21 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior | |
CVE-2026-47416 |
critical | 9.6 | 0.0026 | 2026-07-21 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior | |
CVE-2026-58053 |
critical | 9.4 | 0.0044 | 2026-06-28 | Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options | |
CVE-2026-63830 |
critical | 9.4 | 0.0044 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy ac |