Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-70849 |
medium | 6.5 | 0.0047 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70938 |
medium | 6.5 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70969 |
medium | 6.5 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70975 |
medium | 6.5 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-106492 |
medium | 6.5 | 0.0021 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @back | |
CVE-2026-95716 |
medium | 6.5 | 0.0024 | 2026-10-22 | An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker | |
CVE-2026-61023 |
medium | 6.4 | 0.0015 | 2026-07-21 | Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Inte | |
CVE-2026-71090 |
medium | 6.4 | 0.0023 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-90728 |
medium | 6.3 | 0.0010 | 2026-10-27 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release version | |
CVE-2026-76780 |
medium | 6.3 | 0.0021 | 2026-10-28 | The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and inclu | |
CVE-2026-7971 |
medium | 6.3 | 0.0018 | 2026-05-06 | Inappropriate implementation in ORB in Google Chrome prior to 148.0.7778.96 allowed a remote attacke | |
CVE-2026-7977 |
medium | 6.3 | 0.0016 | 2026-05-06 | Inappropriate implementation in Canvas in Google Chrome prior to 148.0.7778.96 allowed a remote atta | |
CVE-2026-61216 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Suppor | |
CVE-2026-61304 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal | |
CVE-2026-62453 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operat | |
CVE-2026-62474 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (compone | |
CVE-2026-62524 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - Ge | |
CVE-2026-62525 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Quality Workbench | |
CVE-2025-62686 |
medium | 6.2 | 0.0019 | 2025-12-03 | A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service | |
CVE-2025-55076 |
medium | 6.2 | 0.0021 | 2025-12-03 | A local privilege escalation vulnerability exists in the InstallationHelper service included with Pl | |
CVE-2026-14961 |
medium | 6.2 | 0.0016 | 2026-07-15 | Pegatron `Tdelo64.sys` exposes a privileged device interface, `\\.\TdeIo`, that fails to properly re | |
CVE-2026-15430 |
medium | 6.2 | 0.0015 | 2026-08-03 | Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, ve | |
CVE-2026-87299 |
medium | 6.1 | 0.0023 | 2026-10-20 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60162 |
medium | 6.1 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-70838 |
medium | 6.1 | 0.0015 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-91649 |
medium | 6.0 | 0.0017 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affec | |
CVE-2026-46877 |
medium | 6.0 | 0.0017 | 2026-06-17 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device | |
CVE-2026-20246 |
medium | 6.0 | 0.0010 | 2026-06-17 | A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, | |
CVE-2026-3621 |
medium | 5.9 | 0.0028 | 2026-04-23 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Serve | |
CVE-2026-70841 |
medium | 5.6 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-91278 |
medium | 5.5 | 0.0013 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitor | |
CVE-2026-50295 |
medium | 5.5 | 0.0030 | 2026-07-14 | Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a sec | |
CVE-2026-32181 |
medium | 5.5 | 0.0042 | 2026-04-14 | Improper privilege management in Microsoft Windows allows an authorized attacker to deny service loc | |
CVE-2026-32212 |
medium | 5.5 | 0.0031 | 2026-04-14 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) | |
CVE-2026-42185 |
medium | 5.5 | 0.0032 | 2026-05-08 | People is an application to handle users and teams, and distribute permissions across La Suite. Prio | |
CVE-2026-14719 |
medium | 5.5 | 0.0050 | 2026-07-05 | A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impa | |
CVE-2026-70836 |
medium | 5.5 | 0.0015 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-73973 |
medium | 5.5 | 0.0029 | 2026-08-18 | Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. | |
CVE-2026-91426 |
medium | 5.5 | 0.0014 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91439 |
medium | 5.5 | 0.0013 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91547 |
medium | 5.5 | 0.0013 | 2026-10-20 | Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that are a | |
CVE-2026-86935 |
medium | 5.5 | 0.0014 | 2026-10-20 | This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Ga | |
CVE-2026-62355 |
medium | 5.4 | 0.0023 | 2026-07-15 | TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to | |
CVE-2026-60957 |
medium | 5.4 | 0.0012 | 2026-07-21 | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: | |
CVE-2026-61064 |
medium | 5.4 | 0.0023 | 2026-07-21 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Install / Up | |
CVE-2026-71123 |
medium | 5.4 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-17491 |
medium | 5.4 | 0.0017 | 2026-10-16 | IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restr | |
CVE-2026-116806 |
medium | 5.3 | 0.0024 | 2026-10-27 | OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC | |
CVE-2026-77172 |
medium | 5.3 | 0.0027 | 2026-10-27 | App passwords were allowed to bypass password confirmation on sensitive endpoints. | |
CVE-2026-60342 |
medium | 5.3 | 0.0032 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic |