Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-115251 |
high | 7.2 | 0.0031 | 2026-10-25 | The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to use | |
CVE-2026-115807 |
high | 7.1 | 0.0021 | 2026-10-24 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugi | |
CVE-2026-33706 |
high | 7.1 | 0.0017 | 2026-04-10 | Chamilo LMS is a learning management system. Prior to 1.11.38, any authenticated user with a REST AP | |
CVE-2026-46914 |
high | 7.1 | 0.0015 | 2026-06-17 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The support | |
CVE-2026-55550 |
high | 7.1 | 0.0023 | 2026-07-20 | NextCRM is open-source customer relationship management (CRM) software. The CRM product catalog is a | |
CVE-2026-60492 |
high | 7.1 | 0.0034 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component | |
CVE-2026-62565 |
high | 7.1 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year | |
CVE-2026-34496 |
high | 7.1 | 0.0033 | 2026-07-23 | Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affect | |
CVE-2026-17744 |
high | 7.1 | 0.0021 | 2026-07-30 | Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed | |
CVE-2026-18606 |
high | 7.1 | 0.0016 | 2026-08-03 | A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is | |
CVE-2026-19189 |
high | 7.1 | 0.0016 | 2026-08-07 | A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is som | |
CVE-2026-19381 |
high | 7.1 | 0.0016 | 2026-08-10 | A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacte | |
CVE-2026-70936 |
high | 7.1 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-95711 |
high | 7.1 | 0.0024 | 2026-10-22 | An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow a | |
CVE-2026-55843 |
high | 7.0 | 0.0054 | 2026-07-10 | Snipe-IT is an IT asset/license management system. Prior to 8.6.0, UsersController::update() passes | |
CVE-2026-60833 |
high | 7.0 | 0.0013 | 2026-07-21 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported | |
CVE-2026-61061 |
high | 7.0 | 0.0013 | 2026-07-21 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Fram | |
CVE-2026-61120 |
high | 7.0 | 0.0013 | 2026-07-21 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operat | |
CVE-2026-91557 |
high | 7.0 | 0.0009 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2025-40594 |
medium | 6.9 | 0.0021 | 2025-09-09 | A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V | |
CVE-2026-116223 |
medium | 6.9 | 0.0034 | 2026-10-26 | A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of | |
CVE-2026-70843 |
medium | 6.8 | 0.0030 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-87297 |
medium | 6.7 | 0.0015 | 2026-10-20 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communic | |
CVE-2026-90729 |
medium | 6.7 | 0.0022 | 2026-10-27 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release version | |
CVE-2026-35154 |
medium | 6.7 | 0.0009 | 2026-04-20 | Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2 | |
CVE-2026-26946 |
medium | 6.7 | 0.0010 | 2026-05-11 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a | |
CVE-2026-49501 |
medium | 6.7 | 0.0015 | 2026-07-15 | Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, and versions 9.11.0.0 through 9.13.0.2 cont | |
CVE-2026-60406 |
medium | 6.7 | 0.0018 | 2026-07-21 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (comp | |
CVE-2026-61176 |
medium | 6.7 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: I | |
CVE-2026-61182 |
medium | 6.7 | 0.0018 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-16742 |
medium | 6.7 | 0.0006 | 2026-08-10 | systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a loc | |
CVE-2026-71109 |
medium | 6.7 | 0.0018 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-91434 |
medium | 6.7 | 0.0012 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91444 |
medium | 6.7 | 0.0012 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91446 |
medium | 6.7 | 0.0012 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-34484 |
medium | 6.7 | 0.0014 | 2026-10-20 | Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exist | |
CVE-2026-35291 |
medium | 6.6 | 0.0035 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp | |
CVE-2026-61013 |
medium | 6.6 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-57599 |
medium | 6.6 | 0.0036 | 2026-07-22 | There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission | |
CVE-2026-65835 |
medium | 6.6 | 0.0024 | 2026-07-30 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, afte | |
CVE-2026-87298 |
medium | 6.5 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-117468 |
medium | 6.5 | 0.0047 | 2026-10-27 | Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write s | |
CVE-2026-12450 |
medium | 6.5 | 0.0018 | 2026-06-17 | Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote atta | |
CVE-2026-40009 |
medium | 6.5 | 0.0035 | 2026-07-10 | Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Authenticated | |
CVE-2026-47411 |
medium | 6.5 | 0.0034 | 2026-07-21 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior | |
CVE-2026-70824 |
medium | 6.5 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70825 |
medium | 6.5 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70826 |
medium | 6.5 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70831 |
medium | 6.5 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70847 |
medium | 6.5 | 0.0015 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec |