Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-14551 |
high | 8.8 | 0.0014 | 2026-07-22 | The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20. | |
CVE-2026-60373 |
high | 8.8 | 0.0047 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-60439 |
high | 8.8 | 0.0047 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-60455 |
high | 8.8 | 0.0043 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-61246 |
high | 8.8 | 0.0047 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-17751 |
high | 8.8 | 0.0040 | 2026-07-30 | Inappropriate implementation in AdFilter in Google Chrome prior to 151.0.7922.72 allowed a remote at | |
CVE-2026-17868 |
high | 8.8 | 0.0033 | 2026-07-30 | Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote atta | |
CVE-2026-17950 |
high | 8.8 | 0.0037 | 2026-07-30 | Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.72 allowed | |
CVE-2026-17956 |
high | 8.8 | 0.0040 | 2026-07-30 | Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote | |
CVE-2026-17969 |
high | 8.8 | 0.0040 | 2026-07-30 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-14980 |
high | 8.8 | 0.0043 | 2026-07-30 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site req | |
CVE-2026-72534 |
high | 8.8 | 0.0042 | 2026-08-11 | A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an atta | |
CVE-2026-72537 |
high | 8.8 | 0.0040 | 2026-08-11 | A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an atta | |
CVE-2026-73293 |
high | 8.8 | 0.0057 | 2026-08-12 | Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and from 2.19.0-alpha3 | |
CVE-2026-18713 |
high | 8.8 | 0.0052 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authentica | |
CVE-2026-17082 |
high | 8.8 | 0.0050 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges | |
CVE-2026-61231 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtua | |
CVE-2026-70818 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70819 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70821 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70928 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70940 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70944 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-71150 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-16850 |
high | 8.8 | 0.0150 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-68561 |
high | 8.8 | 0.0051 | 2026-08-19 | Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow({ update }) ru | |
CVE-2026-19449 |
high | 8.8 | 0.0014 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unpriv | |
CVE-2026-96044 |
high | 8.8 | 0.0085 | 2026-10-13 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privil | |
CVE-2026-91499 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte | |
CVE-2026-91563 |
high | 8.8 | 0.0032 | 2026-10-20 | Vulnerability in the Oracle OLAP component of Oracle Database Server. Supported versions that are a | |
CVE-2026-110018 |
high | 8.8 | 0.0039 | 2026-10-24 | The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Buil | |
CVE-2024-58390 |
high | 8.7 | 0.0027 | 2026-10-12 | Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerabilit | |
CVE-2026-114658 |
high | 8.7 | 0.0026 | 2026-10-22 | Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the log | |
CVE-2026-42844 |
high | 8.7 | 0.0034 | 2026-05-12 | Grav is a file-based Web platform. In Grav 2.0.0-beta.2, a low-privileged authenticated API user wit | |
CVE-2026-44543 |
high | 8.7 | 0.0041 | 2026-05-28 | Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each | |
CVE-2026-46804 |
high | 8.7 | 0.0033 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-56225 |
high | 8.7 | 0.0037 | 2026-06-23 | Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key managemen | |
CVE-2026-59260 |
high | 8.7 | 0.0088 | 2026-07-12 | OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticat | |
CVE-2026-61463 |
high | 8.7 | 0.0047 | 2026-07-13 | Shiori contains a privilege escalation vulnerability in the account update endpoint that allows auth | |
CVE-2026-60941 |
high | 8.7 | 0.0041 | 2026-07-21 | Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (componen | |
CVE-2026-65603 |
high | 8.7 | 0.0038 | 2026-07-22 | The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in | |
CVE-2026-65897 |
high | 8.7 | 0.0046 | 2026-07-23 | Grav API Plugin versions before 1.0.10 fail to validate the groups field in InvitationsController::c | |
CVE-2026-67356 |
high | 8.7 | 0.0044 | 2026-08-02 | ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with Hos | |
CVE-2026-75481 |
high | 8.7 | 0.0036 | 2026-08-17 | SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when u | |
CVE-2026-114069 |
high | 8.6 | 0.0037 | 2026-10-21 | Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1/project | |
CVE-2026-117466 |
high | 8.6 | 0.0023 | 2026-10-27 | In affected versions of Octopus Server, a user holding the System Manager role could escalate their | |
CVE-2026-44224 |
high | 8.6 | 0.0038 | 2026-05-12 | Wiki.js is an open source wiki app built on Node.js. Prior to 2.5.313, the users.update GraphQL muta | |
CVE-2026-54415 |
high | 8.6 | 0.0035 | 2026-06-17 | Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS befo | |
CVE-2026-8069 |
high | 8.5 | 0.0012 | 2026-05-08 | PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability. | |
CVE-2026-44470 |
high | 8.5 | 0.0016 | 2026-05-13 | The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple s |