Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1966)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1130)
CWE-89 (1128)
CWE-125 (1089)
CWE-22 (1054)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (665)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-101697 |
medium | 6.1 | 0.0027 | 2026-10-20 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Ad | |
CVE-2026-101714 |
medium | 6.1 | 0.0027 | 2026-10-20 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The | |
CVE-2026-91505 |
medium | 6.0 | 0.0013 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port | |
CVE-2026-1079 |
medium | 6.0 | 0.0026 | 2026-04-07 | A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions | |
CVE-2026-40874 |
medium | 6.0 | 0.0017 | 2026-04-21 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 20 | |
CVE-2026-35247 |
medium | 6.0 | 0.0012 | 2026-04-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-46768 |
medium | 6.0 | 0.0015 | 2026-06-17 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device | |
CVE-2026-46825 |
medium | 6.0 | 0.0016 | 2026-06-17 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device | |
CVE-2026-48529 |
medium | 6.0 | 0.0017 | 2026-06-26 | GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mod | |
CVE-2026-50280 |
medium | 6.0 | 0.0040 | 2026-07-02 | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 and above prior to 5.9.21, the | |
CVE-2026-60265 |
medium | 6.0 | 0.0017 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60626 |
medium | 6.0 | 0.0016 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-71013 |
medium | 6.0 | 0.0018 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-71114 |
medium | 6.0 | 0.0017 | 2026-08-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-71115 |
medium | 6.0 | 0.0017 | 2026-08-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-71127 |
medium | 6.0 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-71135 |
medium | 6.0 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-71137 |
medium | 6.0 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-101701 |
medium | 6.0 | 0.0018 | 2026-10-20 | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Req | |
CVE-2026-91413 |
medium | 6.0 | 0.0032 | 2026-10-20 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - S | |
CVE-2026-91423 |
medium | 6.0 | 0.0016 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91633 |
medium | 6.0 | 0.0014 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-119317 |
medium | 6.0 | 0.0022 | 2026-10-29 | On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrar | |
CVE-2026-87303 |
medium | 5.9 | 0.0012 | 2026-10-20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-91240 |
medium | 5.9 | 0.0031 | 2026-10-20 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-91319 |
medium | 5.9 | 0.0027 | 2026-10-20 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business | |
CVE-2026-34294 |
medium | 5.9 | 0.0018 | 2026-04-21 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-40966 |
medium | 5.9 | 0.0023 | 2026-04-28 | In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from oth | |
CVE-2026-46968 |
medium | 5.9 | 0.0029 | 2026-07-21 | Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle | |
CVE-2026-47003 |
medium | 5.9 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-60348 |
medium | 5.9 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). | |
CVE-2026-60669 |
medium | 5.9 | 0.0027 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Mexico product of Oracle PeopleSoft (c | |
CVE-2026-60695 |
medium | 5.9 | 0.0032 | 2026-07-21 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (componen | |
CVE-2026-60801 |
medium | 5.9 | 0.0032 | 2026-07-21 | Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: I | |
CVE-2026-61069 |
medium | 5.9 | 0.0027 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN General Ledger Argentina product of Oracle PeopleSoft | |
CVE-2026-61103 |
medium | 5.9 | 0.0027 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (compone | |
CVE-2026-62484 |
medium | 5.9 | 0.0029 | 2026-07-21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int | |
CVE-2026-70677 |
medium | 5.9 | 0.0025 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-70789 |
medium | 5.9 | 0.0025 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Serv | |
CVE-2026-71075 |
medium | 5.9 | 0.0027 | 2026-08-18 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX | |
CVE-2026-73909 |
medium | 5.9 | 0.0033 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-101737 |
medium | 5.9 | 0.0046 | 2026-10-20 | Vulnerability in Oracle Java SE (component: Compiler). The supported version that is affected is O | |
CVE-2026-101761 |
medium | 5.9 | 0.0032 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Securit | |
CVE-2026-101788 |
medium | 5.9 | 0.0032 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Compone | |
CVE-2026-101792 |
medium | 5.9 | 0.0017 | 2026-10-20 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communica | |
CVE-2026-91462 |
medium | 5.9 | 0.0027 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-62314 |
medium | 5.8 | 0.0034 | 2026-07-15 | Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream | |
CVE-2026-46975 |
medium | 5.8 | 0.0030 | 2026-07-21 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte | |
CVE-2026-61079 |
medium | 5.8 | 0.0011 | 2026-07-21 | Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are | |
CVE-2026-91320 |
medium | 5.7 | 0.0011 | 2026-10-20 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDevel |