Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-47407 |
critical | 9.4 | 0.0030 | 2026-07-21 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to versio | |
CVE-2026-61203 |
critical | 9.4 | 0.0046 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Exp | |
CVE-2026-75843 |
critical | 9.4 | 0.0038 | 2026-08-18 | ArcadeDB before 26.8.1 fails to bind the authenticated principal on the gRPC transaction executor th | |
CVE-2026-75851 |
critical | 9.4 | 0.0039 | 2026-08-18 | ArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fails to propagate the | |
CVE-2026-40317 |
critical | 9.3 | 0.0022 | 2026-04-18 | NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0. | |
CVE-2026-8980 |
critical | 9.3 | 0.0052 | 2026-05-28 | The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An au | |
CVE-2026-60248 |
critical | 9.3 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-75837 |
critical | 9.3 | 0.0049 | 2026-08-18 | Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required sec | |
CVE-2026-25784 |
critical | 9.3 | 0.0034 | 2026-10-23 | Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (c | |
CVE-2026-40484 |
critical | 9.1 | 0.0087 | 2026-04-18 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the database backu | |
CVE-2026-51119 |
critical | 9.1 | 0.0054 | 2026-07-10 | An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUs | |
CVE-2026-44231 |
critical | 9.1 | 0.0025 | 2026-07-20 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10, 6 | |
CVE-2026-60567 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-71036 |
critical | 9.1 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-40572 |
critical | 9.0 | 0.0021 | 2026-04-18 | NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0. | |
CVE-2026-61201 |
critical | 9.0 | 0.0039 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (componen | |
CVE-2026-61204 |
critical | 9.0 | 0.0018 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft (comp | |
CVE-2026-45176 |
high | 8.9 | 0.0012 | 2026-06-11 | Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within | |
CVE-2026-65595 |
high | 8.9 | 0.0069 | 2026-07-22 | n8n before 2.30.1 and 2.29.8 assigns all Public API key scopes to JWTs issued through the Token Exch | |
CVE-2026-100801 |
high | 8.8 | 0.0028 | 2026-09-29 | Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153. | |
CVE-2026-91668 |
high | 8.8 | 0.0025 | 2026-10-20 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictiona | |
CVE-2026-113947 |
high | 8.8 | 0.0051 | 2026-10-26 | This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate | |
CVE-2026-65220 |
high | 8.8 | 0.0026 | 2026-10-27 | A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ me | |
CVE-2026-118008 |
high | 8.8 | 0.0035 | 2026-10-27 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 a | |
CVE-2026-58255 |
high | 8.8 | 0.0042 | 2026-10-27 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.12 | |
CVE-2026-34393 |
high | 8.8 | 0.0039 | 2026-04-15 | Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint | |
CVE-2026-40002 |
high | 8.8 | 0.0012 | 2026-04-17 | Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigge | |
CVE-2026-39386 |
high | 8.8 | 0.0044 | 2026-04-21 | Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 throug | |
CVE-2026-6761 |
high | 8.8 | 0.0022 | 2026-04-21 | Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firef | |
CVE-2026-6769 |
high | 8.8 | 0.0023 | 2026-04-21 | Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150, Firefox | |
CVE-2026-5141 |
high | 8.8 | 0.0023 | 2026-04-29 | Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability | |
CVE-2026-24072 |
high | 8.8 | 0.0065 | 2026-05-04 | An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .ht | |
CVE-2026-28995 |
high | 8.8 | 0.0012 | 2026-05-11 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS | |
CVE-2026-42289 |
high | 8.8 | 0.0015 | 2026-05-12 | ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user | |
CVE-2026-12018 |
high | 8.8 | 0.0016 | 2026-06-11 | Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a l | |
CVE-2026-46885 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supporte | |
CVE-2026-46903 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Busines | |
CVE-2026-46916 |
high | 8.8 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business S | |
CVE-2026-46921 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-46928 |
high | 8.8 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Interna | |
CVE-2026-46929 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Plan | |
CVE-2026-46937 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Upd | |
CVE-2026-46940 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Plan | |
CVE-2026-46942 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Process Manufacturing Process Planning product of Oracle E-Business Suit | |
CVE-2026-46951 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-46952 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-46961 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component | |
CVE-2026-46962 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component | |
CVE-2026-46972 |
high | 8.8 | 0.0030 | 2026-06-17 | Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suit | |
CVE-2026-46973 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suit |