Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1968)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1132)
CWE-89 (1129)
CWE-125 (1089)
CWE-22 (1058)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (666)
CWE-74 (605)
CWE-639 (585)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (291)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-70936 |
high | 7.1 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70967 |
high | 7.1 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-70971 |
high | 7.1 | 0.0030 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-71003 |
high | 7.1 | 0.0038 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-71012 |
high | 7.1 | 0.0038 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-101735 |
high | 7.1 | 0.0030 | 2026-10-20 | Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Pr | |
CVE-2026-101773 |
high | 7.1 | 0.0030 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group R | |
CVE-2026-101827 |
high | 7.1 | 0.0027 | 2026-10-20 | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: I | |
CVE-2026-91438 |
high | 7.1 | 0.0028 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91511 |
high | 7.1 | 0.0022 | 2026-10-20 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Opera | |
CVE-2026-91228 |
high | 7.1 | 0.0029 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-101429 |
high | 7.0 | 0.0014 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) | |
CVE-2026-49805 |
high | 7.0 | 0.0024 | 2026-07-14 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall | |
CVE-2026-50297 |
high | 7.0 | 0.0024 | 2026-07-14 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall | |
CVE-2026-50325 |
high | 7.0 | 0.0024 | 2026-07-14 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall | |
CVE-2026-60494 |
high | 7.0 | 0.0027 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component | |
CVE-2026-60705 |
high | 7.0 | 0.0029 | 2026-07-21 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-41920 |
high | 7.0 | 0.0053 | 2026-07-29 | Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic S | |
CVE-2026-21064 |
high | 7.0 | 0.0012 | 2026-08-10 | Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause de | |
CVE-2026-60902 |
high | 7.0 | 0.0013 | 2026-08-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxe | |
CVE-2026-62449 |
high | 7.0 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal | |
CVE-2026-70676 |
high | 7.0 | 0.0029 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-70697 |
high | 7.0 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-70914 |
high | 7.0 | 0.0015 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70992 |
high | 7.0 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-71041 |
high | 7.0 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart). The | |
CVE-2026-71098 |
high | 7.0 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-101739 |
high | 7.0 | 0.0013 | 2026-10-20 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-101769 |
high | 7.0 | 0.0028 | 2026-10-20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported | |
CVE-2026-114259 |
medium | 6.9 | 0.0030 | 2026-10-21 | A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e959 | |
CVE-2026-114262 |
medium | 6.9 | 0.0037 | 2026-10-21 | A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. I | |
CVE-2026-116809 |
medium | 6.9 | 0.0021 | 2026-10-27 | OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedu | |
CVE-2026-117512 |
medium | 6.9 | 0.0037 | 2026-10-27 | A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the | |
CVE-2026-118662 |
medium | 6.9 | 0.0029 | 2026-10-28 | Vite is a frontend tooling framework for JavaScript. From 6.4.4 until 6.4.5, the Vite development se | |
CVE-2026-41243 |
medium | 6.9 | 0.0018 | 2026-04-23 | OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580fe501923f0 | |
CVE-2026-12529 |
medium | 6.9 | 0.0028 | 2026-06-17 | A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Pr | |
CVE-2026-56302 |
medium | 6.9 | 0.0035 | 2026-06-24 | Capgo before 12.128.2 contains an unsecured images bucket lacking any row level security controls, a | |
CVE-2026-21084 |
medium | 6.9 | 0.0013 | 2026-08-10 | Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access s | |
CVE-2026-67283 |
medium | 6.9 | 0.0042 | 2026-08-12 | Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud | |
CVE-2026-66916 |
medium | 6.9 | 0.0043 | 2026-08-22 | Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in Jo | |
CVE-2026-76600 |
medium | 6.9 | 0.0041 | 2026-08-22 | Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The De | |
CVE-2026-76601 |
medium | 6.9 | 0.0041 | 2026-08-22 | Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugi | |
CVE-2026-76603 |
medium | 6.9 | 0.0041 | 2026-08-22 | Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7 | |
CVE-2026-76608 |
medium | 6.9 | 0.0041 | 2026-08-22 | Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fab | |
CVE-2026-76609 |
medium | 6.9 | 0.0041 | 2026-08-22 | Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - Th | |
CVE-2026-116106 |
medium | 6.9 | 0.0035 | 2026-10-26 | A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulne | 1 PoC |
CVE-2026-101362 |
medium | 6.9 | 0.0022 | 2026-10-20 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected | |
CVE-2026-60885 |
medium | 6.8 | 0.0034 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push | |
CVE-2026-87377 |
medium | 6.8 | 0.0026 | 2026-10-20 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-22692 |
medium | 6.8 | 0.0040 | 2026-04-14 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.13 and versions |