Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-111057 |
critical | 10.0 | 0.0044 | 2026-10-19 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From | |
CVE-2026-58630 |
critical | 10.0 | 0.0086 | 2026-07-24 | Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges o | |
CVE-2026-66803 |
critical | 10.0 | 0.0090 | 2026-07-30 | Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a ne | |
CVE-2026-31843 |
critical | 10.0 | 0.0138 | 2026-04-16 | The goodoneuz/pay-uz Laravel package (<= 2.2.24) contains a critical vulnerability in the /payment/a | |
CVE-2026-35435 |
critical | 10.0 | 0.0116 | 2026-05-07 | Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to | |
CVE-2026-41900 |
critical | 10.0 | 0.0091 | 2026-05-08 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3 | |
CVE-2026-35307 |
critical | 10.0 | 0.0047 | 2026-06-17 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-35308 |
critical | 10.0 | 0.0047 | 2026-06-17 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Th | |
CVE-2026-46978 |
critical | 10.0 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daem | |
CVE-2026-50746 |
critical | 10.0 | 0.0169 | 2026-07-02 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability | |
CVE-2026-60358 |
critical | 10.0 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-60366 |
critical | 10.0 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-65884 |
critical | 10.0 | 0.0052 | 2026-07-29 | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method | |
CVE-2026-65887 |
critical | 10.0 | 0.0052 | 2026-07-29 | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The | |
CVE-2026-65888 |
critical | 10.0 | 0.0052 | 2026-07-29 | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogi | |
CVE-2026-61241 |
critical | 10.0 | 0.0051 | 2026-08-18 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID L | |
CVE-2026-70880 |
critical | 10.0 | 0.0051 | 2026-08-18 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (compon | |
CVE-2026-70921 |
critical | 10.0 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-76607 |
critical | 10.0 | 0.0041 | 2026-08-22 | Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2. | |
CVE-2026-83944 |
critical | 10.0 | 0.0044 | 2026-09-17 | Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges ov | |
CVE-2026-101809 |
critical | 10.0 | 0.0054 | 2026-10-20 | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification M | |
CVE-2026-91299 |
critical | 10.0 | 0.0046 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: | |
CVE-2026-91251 |
critical | 9.9 | 0.0045 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Su | |
CVE-2026-91354 |
critical | 9.9 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-33109 |
critical | 9.9 | 0.0071 | 2026-05-07 | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker | |
CVE-2026-42823 |
critical | 9.9 | 0.0060 | 2026-05-12 | Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over | |
CVE-2026-35263 |
critical | 9.9 | 0.0036 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Support | |
CVE-2026-35268 |
critical | 9.9 | 0.0052 | 2026-06-17 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-35280 |
critical | 9.9 | 0.0048 | 2026-06-17 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-35281 |
critical | 9.9 | 0.0048 | 2026-06-17 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-35282 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-35283 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-35284 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-35285 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-35294 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Main | |
CVE-2026-35313 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-35316 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-35321 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-35323 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-46765 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose | |
CVE-2026-46767 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose | |
CVE-2026-46779 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-46782 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-46792 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Gene | |
CVE-2026-46793 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Data | |
CVE-2026-46802 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit | |
CVE-2026-46814 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit | |
CVE-2026-46832 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-46838 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit | |
CVE-2026-46844 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit |