Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1968)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1132)
CWE-89 (1129)
CWE-125 (1089)
CWE-22 (1058)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (666)
CWE-74 (605)
CWE-639 (585)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (291)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-71002 |
high | 8.5 | 0.0028 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-71049 |
high | 8.5 | 0.0030 | 2026-08-18 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: I | |
CVE-2026-71057 |
high | 8.5 | 0.0038 | 2026-08-18 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Securit | |
CVE-2026-71062 |
high | 8.5 | 0.0033 | 2026-08-18 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte | |
CVE-2026-71155 |
high | 8.5 | 0.0030 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-91651 |
high | 8.5 | 0.0031 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is a | |
CVE-2026-83393 |
high | 8.5 | 0.0030 | 2026-10-20 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Oper | |
CVE-2026-75882 |
high | 8.5 | 0.0010 | 2026-10-30 | An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption a | |
CVE-2026-61708 |
high | 8.5 | 0.0040 | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations nee | |
CVE-2026-101648 |
high | 8.4 | 0.0032 | 2026-10-20 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Intern | |
CVE-2026-87322 |
high | 8.4 | 0.0023 | 2026-10-20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-91266 |
high | 8.4 | 0.0013 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitor | |
CVE-2026-35570 |
high | 8.4 | 0.0023 | 2026-04-21 | OpenClaude is an open-source coding-agent command line interface for cloud and local model providers | |
CVE-2026-45178 |
high | 8.4 | 0.0036 | 2026-06-11 | Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within i | |
CVE-2026-46788 |
high | 8.4 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60196 |
high | 8.4 | 0.0038 | 2026-07-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-60383 |
high | 8.4 | 0.0016 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60677 |
high | 8.4 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle Common Application Components product of Oracle E-Business Suite (compon | |
CVE-2026-60723 |
high | 8.4 | 0.0016 | 2026-07-21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market P | |
CVE-2026-60763 |
high | 8.4 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Comm | |
CVE-2026-60837 |
high | 8.4 | 0.0016 | 2026-07-21 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal | |
CVE-2026-58043 |
high | 8.4 | 0.0014 | 2026-07-30 | A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree pr | |
CVE-2026-55978 |
high | 8.4 | 0.0015 | 2026-08-06 | An improper access control vulnerability in CatchPulse could allow a non-administrative local attack | |
CVE-2026-60928 |
high | 8.4 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-70840 |
high | 8.4 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70842 |
high | 8.4 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-101744 |
high | 8.4 | 0.0030 | 2026-10-20 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-101684 |
high | 8.3 | 0.0042 | 2026-10-20 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Sui | |
CVE-2026-115376 |
high | 8.3 | 0.0027 | 2026-10-22 | Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that | |
CVE-2026-41270 |
high | 8.3 | 0.0023 | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3. | |
CVE-2026-35262 |
high | 8.3 | 0.0039 | 2026-06-17 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market P | |
CVE-2026-46925 |
high | 8.3 | 0.0027 | 2026-06-17 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-55118 |
high | 8.3 | 0.0037 | 2026-07-02 | A malicious actor with access to the network,low privileges and under certain conditions could explo | |
CVE-2026-60471 |
high | 8.3 | 0.0031 | 2026-07-21 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-60582 |
high | 8.3 | 0.0038 | 2026-07-21 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite ( | |
CVE-2026-60788 |
high | 8.3 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Op | |
CVE-2026-62473 |
high | 8.3 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite | |
CVE-2026-67431 |
high | 8.3 | 0.0036 | 2026-07-29 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23. | |
CVE-2026-70476 |
high | 8.3 | 0.0052 | 2026-08-04 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3. | |
CVE-2026-61305 |
high | 8.3 | 0.0039 | 2026-08-18 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Securit | |
CVE-2026-62455 |
high | 8.3 | 0.0035 | 2026-08-18 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-70770 |
high | 8.3 | 0.0039 | 2026-08-18 | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Inte | |
CVE-2026-71095 |
high | 8.3 | 0.0039 | 2026-08-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-73929 |
high | 8.3 | 0.0031 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-73931 |
high | 8.3 | 0.0031 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-101785 |
high | 8.3 | 0.0034 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). | |
CVE-2026-91597 |
high | 8.3 | 0.0018 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-101704 |
high | 8.2 | 0.0019 | 2026-10-20 | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Oth | |
CVE-2026-87394 |
high | 8.2 | 0.0040 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91286 |
high | 8.2 | 0.0019 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitor |