Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1968)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1132)
CWE-89 (1129)
CWE-125 (1089)
CWE-22 (1058)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (666)
CWE-74 (605)
CWE-639 (585)
CWE-400 (547)
CWE-269 (516)
CWE-119 (507)
CWE-502 (496)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (291)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-70952 |
high | 8.2 | 0.0044 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70964 |
high | 8.2 | 0.0029 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-70993 |
high | 8.2 | 0.0038 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-71016 |
high | 8.2 | 0.0032 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-71018 |
high | 8.2 | 0.0032 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-71024 |
high | 8.2 | 0.0044 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-71096 |
high | 8.2 | 0.0029 | 2026-08-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-71129 |
high | 8.2 | 0.0018 | 2026-08-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-71130 |
high | 8.2 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-71159 |
high | 8.2 | 0.0035 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-73925 |
high | 8.2 | 0.0033 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-73937 |
high | 8.2 | 0.0040 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-101690 |
high | 8.2 | 0.0037 | 2026-10-20 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Sui | |
CVE-2026-101758 |
high | 8.2 | 0.0036 | 2026-10-20 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communic | |
CVE-2026-101841 |
high | 8.2 | 0.0026 | 2026-10-20 | Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Servi | |
CVE-2026-61726 |
high | 8.1 | 0.0029 | 2026-10-16 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. | |
CVE-2026-101411 |
high | 8.1 | 0.0041 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi | |
CVE-2026-101665 |
high | 8.1 | 0.0039 | 2026-10-20 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admi | |
CVE-2026-101672 |
high | 8.1 | 0.0042 | 2026-10-20 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: In | |
CVE-2026-101700 |
high | 8.1 | 0.0042 | 2026-10-20 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component | |
CVE-2026-87305 |
high | 8.1 | 0.0035 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-87309 |
high | 8.1 | 0.0035 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package | |
CVE-2026-91269 |
high | 8.1 | 0.0033 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-91271 |
high | 8.1 | 0.0025 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitor | |
CVE-2026-91287 |
high | 8.1 | 0.0022 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-58282 |
high | 8.1 | 0.0042 | 2026-07-03 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor | |
CVE-2026-58286 |
high | 8.1 | 0.0042 | 2026-07-03 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor | |
CVE-2026-58617 |
high | 8.1 | 0.0079 | 2026-07-14 | Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate | |
CVE-2026-34309 |
high | 8.1 | 0.0027 | 2026-04-21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Secu | |
CVE-2026-33381 |
high | 8.1 | 0.0034 | 2026-05-13 | When a user's access to mint tokens for a service account is revoked, it is sometimes still possible | |
CVE-2026-35277 |
high | 8.1 | 0.0027 | 2026-05-28 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected | |
CVE-2026-46849 |
high | 8.1 | 0.0037 | 2026-06-17 | Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (compo | |
CVE-2026-46891 |
high | 8.1 | 0.0034 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards (compone | |
CVE-2026-46898 |
high | 8.1 | 0.0036 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite ( | |
CVE-2026-46920 |
high | 8.1 | 0.0029 | 2026-06-17 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-46927 |
high | 8.1 | 0.0037 | 2026-06-17 | Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Oper | |
CVE-2026-46939 |
high | 8.1 | 0.0034 | 2026-06-17 | Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply | |
CVE-2026-28381 |
high | 8.1 | 0.0035 | 2026-06-22 | The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run qu | |
CVE-2026-13864 |
high | 8.1 | 0.0029 | 2026-06-30 | Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacke | |
CVE-2026-8147 |
high | 8.1 | 0.0055 | 2026-07-02 | In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoint | |
CVE-2026-55119 |
high | 8.1 | 0.0039 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an Improper Access Con | |
CVE-2026-22555 |
high | 8.1 | 0.0039 | 2026-07-03 | Gitea versions before 1.26.0 allow API users to fork a repository into an organization without first | |
CVE-2026-28699 |
high | 8.1 | 0.0055 | 2026-07-03 | Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed | |
CVE-2026-47014 |
high | 8.1 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Securit | |
CVE-2026-47028 |
high | 8.1 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite | |
CVE-2026-60192 |
high | 8.1 | 0.0039 | 2026-07-21 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported | |
CVE-2026-60222 |
high | 8.1 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60281 |
high | 8.1 | 0.0037 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60323 |
high | 8.1 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-60520 |
high | 8.1 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co |