Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1966)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1130)
CWE-89 (1129)
CWE-125 (1089)
CWE-22 (1055)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (665)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-101726 |
medium | 6.5 | 0.0041 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). Suppor | |
CVE-2026-101728 |
medium | 6.5 | 0.0041 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggab | |
CVE-2026-101774 |
medium | 6.5 | 0.0028 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggab | |
CVE-2026-101778 |
medium | 6.5 | 0.0035 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Compone | |
CVE-2026-101780 |
medium | 6.5 | 0.0035 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugi | |
CVE-2026-101782 |
medium | 6.5 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Orac | |
CVE-2026-101789 |
medium | 6.5 | 0.0035 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz | |
CVE-2026-101794 |
medium | 6.5 | 0.0035 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). | |
CVE-2026-101799 |
medium | 6.5 | 0.0022 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group R | |
CVE-2026-101802 |
medium | 6.5 | 0.0035 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser) | |
CVE-2026-101803 |
medium | 6.5 | 0.0039 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). | |
CVE-2026-101819 |
medium | 6.5 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-101828 |
medium | 6.5 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: | |
CVE-2026-113159 |
medium | 6.5 | 0.0033 | 2026-10-20 | Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacke | |
CVE-2026-83395 |
medium | 6.5 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-91395 |
medium | 6.5 | 0.0025 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-91396 |
medium | 6.5 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-91412 |
medium | 6.5 | 0.0034 | 2026-10-20 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Support | |
CVE-2026-91420 |
medium | 6.5 | 0.0023 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91429 |
medium | 6.5 | 0.0022 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91432 |
medium | 6.5 | 0.0027 | 2026-10-20 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Support | |
CVE-2026-91440 |
medium | 6.5 | 0.0026 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91441 |
medium | 6.5 | 0.0019 | 2026-10-20 | Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component | |
CVE-2026-91480 |
medium | 6.5 | 0.0033 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (comp | |
CVE-2026-91482 |
medium | 6.5 | 0.0033 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (comp | |
CVE-2026-91541 |
medium | 6.5 | 0.0032 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (c | |
CVE-2026-91554 |
medium | 6.5 | 0.0019 | 2026-10-20 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). The | |
CVE-2026-91574 |
medium | 6.5 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Securi | |
CVE-2026-91576 |
medium | 6.5 | 0.0033 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-87835 |
medium | 6.5 | 0.0025 | 2026-10-24 | The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a vis | |
CVE-2026-103381 |
medium | 6.5 | 0.0016 | 2026-10-26 | The Mintpay for WooCommerce WordPress plugin through 2.2.3 does not verify the authenticity of the p | |
CVE-2026-87373 |
medium | 6.5 | 0.0026 | 2026-10-20 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-113196 |
medium | 6.5 | 0.0035 | 2026-10-20 | Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote | |
CVE-2026-87321 |
medium | 6.4 | 0.0012 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package | |
CVE-2026-91466 |
medium | 6.4 | 0.0024 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft | |
CVE-2026-91662 |
medium | 6.4 | 0.0009 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affec | |
CVE-2026-35252 |
medium | 6.4 | 0.0016 | 2026-04-21 | Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracl | |
CVE-2026-48947 |
medium | 6.4 | 0.0033 | 2026-07-07 | An improper access check allows privileged users to overwrite media files without editing permission | |
CVE-2026-48948 |
medium | 6.4 | 0.0042 | 2026-07-07 | An improper access check allows user to download vcard exports of com_contact contacts that are inac | |
CVE-2026-48955 |
medium | 6.4 | 0.0034 | 2026-07-07 | An improper access check allows unauthorized users to access workflow stage and transition informati | |
CVE-2026-48956 |
medium | 6.4 | 0.0027 | 2026-07-07 | An improper access check allows users to display a list of modules in the frontend. | |
CVE-2026-48957 |
medium | 6.4 | 0.0042 | 2026-07-07 | An improper access check allows unauthorized users to access com_privacy datasets. | |
CVE-2026-48958 |
medium | 6.4 | 0.0046 | 2026-07-07 | An improper access check allows unauthorized users to create custom fields via webservices endpoints | |
CVE-2026-60158 |
medium | 6.4 | 0.0012 | 2026-07-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-60620 |
medium | 6.4 | 0.0025 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: | |
CVE-2026-60864 |
medium | 6.4 | 0.0023 | 2026-07-21 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product | |
CVE-2026-61143 |
medium | 6.4 | 0.0031 | 2026-07-21 | Vulnerability in the Oracle Communications Convergent Charging Controller product of Oracle Communic | |
CVE-2026-61190 |
medium | 6.4 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-61217 |
medium | 6.4 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: Oracle | |
CVE-2026-71090 |
medium | 6.4 | 0.0023 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec |