Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2662)
CWE-79 (1970)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1132)
CWE-89 (1130)
CWE-125 (1092)
CWE-22 (1058)
CWE-200 (875)
CWE-306 (875)
CWE-20 (832)
CWE-787 (739)
CWE-78 (730)
CWE-918 (712)
CWE-863 (675)
CWE-94 (667)
CWE-74 (605)
CWE-639 (585)
CWE-400 (547)
CWE-269 (516)
CWE-119 (508)
CWE-502 (497)
CWE-287 (461)
CWE-770 (455)
CWE-121 (449)
CWE-190 (422)
CWE-362 (394)
CWE-77 (385)
CWE-476 (323)
CWE-352 (292)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-71110 |
high | 8.1 | 0.0036 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-71112 |
high | 8.1 | 0.0039 | 2026-08-18 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (componen | |
CVE-2026-101768 |
high | 8.1 | 0.0043 | 2026-10-20 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The suppor | |
CVE-2026-101770 |
high | 8.1 | 0.0044 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs | |
CVE-2026-101771 |
high | 8.1 | 0.0041 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs | |
CVE-2026-101772 |
high | 8.1 | 0.0041 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs | |
CVE-2026-101791 |
high | 8.1 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communica | |
CVE-2026-91503 |
high | 8.1 | 0.0025 | 2026-10-20 | Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected | |
CVE-2026-91635 |
high | 8.1 | 0.0034 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-91647 |
high | 8.1 | 0.0033 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-101831 |
high | 8.1 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-101834 |
high | 8.1 | 0.0035 | 2026-10-20 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workfl | |
CVE-2026-83361 |
high | 8.1 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Busi | |
CVE-2026-90867 |
high | 8.1 | 0.0040 | 2026-10-29 | Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior t | |
CVE-2026-35425 |
high | 8.0 | 0.0070 | 2026-07-24 | Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code | |
CVE-2026-35067 |
high | 8.0 | 0.0015 | 2026-06-17 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerabi | |
CVE-2026-46923 |
high | 8.0 | 0.0037 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Su | |
CVE-2026-60325 |
high | 8.0 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-60533 |
high | 8.0 | 0.0029 | 2026-07-21 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-60579 |
high | 8.0 | 0.0029 | 2026-07-21 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite ( | |
CVE-2026-60790 |
high | 8.0 | 0.0037 | 2026-07-21 | Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Op | |
CVE-2026-60807 |
high | 8.0 | 0.0035 | 2026-07-21 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Interna | |
CVE-2026-61009 |
high | 8.0 | 0.0037 | 2026-07-21 | Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (comp | |
CVE-2026-61224 |
high | 8.0 | 0.0037 | 2026-07-21 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communicat | |
CVE-2026-63265 |
high | 8.0 | 0.0018 | 2026-07-22 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Re | |
CVE-2026-60371 |
high | 8.0 | 0.0027 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-60961 |
high | 8.0 | 0.0029 | 2026-08-18 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60998 |
high | 8.0 | 0.0037 | 2026-08-18 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-62602 |
high | 8.0 | 0.0029 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-70690 |
high | 8.0 | 0.0037 | 2026-08-18 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - Ge | |
CVE-2026-70802 |
high | 8.0 | 0.0037 | 2026-08-18 | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (compon | |
CVE-2026-71122 |
high | 8.0 | 0.0037 | 2026-08-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-91517 |
high | 8.0 | 0.0017 | 2026-10-20 | Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (comp | |
CVE-2026-34444 |
high | 7.9 | 0.0061 | 2026-04-06 | Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is | |
CVE-2026-46848 |
high | 7.9 | 0.0014 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp | |
CVE-2026-70685 |
high | 7.9 | 0.0018 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-87316 |
high | 7.8 | 0.0014 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-91304 |
high | 7.8 | 0.0012 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-91314 |
high | 7.8 | 0.0012 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-91315 |
high | 7.8 | 0.0015 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-92375 |
high | 7.8 | 0.0010 | 2026-10-27 | An improper access control vulnerability in the IPC communication between TeamViewer Full Client or | |
CVE-2026-65773 |
high | 7.8 | 0.0030 | 2026-08-11 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locall | |
CVE-2026-50311 |
high | 7.8 | 0.0030 | 2026-07-14 | Improper access control in Windows Server allows an authorized attacker to elevate privileges locall | |
CVE-2026-50335 |
high | 7.8 | 0.0030 | 2026-07-14 | Improper access control in Windows Operating Systems allows an authorized attacker to elevate privil | |
CVE-2026-50351 |
high | 7.8 | 0.0030 | 2026-07-14 | Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to | |
CVE-2026-50373 |
high | 7.8 | 0.0030 | 2026-07-14 | Improper access control in Microsoft Windows Search Component allows an authorized attacker to eleva | |
CVE-2026-50423 |
high | 7.8 | 0.0030 | 2026-07-14 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locall | |
CVE-2026-55014 |
high | 7.8 | 0.0030 | 2026-07-14 | Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate priv | |
CVE-2026-57088 |
high | 7.8 | 0.0030 | 2026-07-14 | Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevat | |
CVE-2026-26183 |
high | 7.8 | 0.0026 | 2026-04-14 | Improper access control in Windows RPC API allows an authorized attacker to elevate privileges local |