Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1099)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-5330 |
medium | 5.5 | 0.0031 | 2026-04-02 | A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. Affected by | |
CVE-2026-32214 |
medium | 5.5 | 0.0022 | 2026-04-14 | Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to discl | |
CVE-2026-6492 |
medium | 5.5 | 0.0042 | 2026-04-17 | A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc76197 | |
CVE-2026-6602 |
medium | 5.5 | 0.0038 | 2026-04-20 | A vulnerability was found in rickxy Hospital Management System up to 88a4290d957dc5bdde8a56e5ad451ad | |
CVE-2026-34302 |
medium | 5.5 | 0.0024 | 2026-04-21 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader) | |
CVE-2026-7468 |
medium | 5.5 | 0.0036 | 2026-04-30 | A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unk | |
CVE-2026-7686 |
medium | 5.5 | 0.0036 | 2026-05-03 | A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerabilit | |
CVE-2026-8033 |
medium | 5.5 | 0.0029 | 2026-05-06 | A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. This affects an u | |
CVE-2026-41646 |
medium | 5.5 | 0.0011 | 2026-05-08 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before ver | |
CVE-2026-28988 |
medium | 5.5 | 0.0013 | 2026-05-11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and | |
CVE-2026-28993 |
medium | 5.5 | 0.0012 | 2026-05-11 | This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS | |
CVE-2026-41101 |
medium | 5.5 | 0.0029 | 2026-05-12 | Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing l | |
CVE-2026-41102 |
medium | 5.5 | 0.0029 | 2026-05-12 | Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoo | |
CVE-2026-42832 |
medium | 5.5 | 0.0022 | 2026-05-12 | Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing loca | |
CVE-2026-8586 |
medium | 5.5 | 0.0010 | 2026-05-14 | Inappropriate implementation in Chromoting in Google Chrome prior to 148.0.7778.168 allowed a local | |
CVE-2026-8758 |
medium | 5.5 | 0.0028 | 2026-05-17 | A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This impacts an unknown | |
CVE-2026-11344 |
medium | 5.5 | 0.0037 | 2026-06-05 | A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown fu | |
CVE-2026-13547 |
medium | 5.5 | 0.0047 | 2026-06-29 | A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue aff | |
CVE-2026-13553 |
medium | 5.5 | 0.0050 | 2026-06-29 | A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an unknown fun | |
CVE-2026-13568 |
medium | 5.5 | 0.0047 | 2026-06-29 | A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability | |
CVE-2026-13914 |
medium | 5.5 | 0.0012 | 2026-06-30 | Inappropriate implementation in Passwords in Google Chrome on Mac prior to 150.0.7871.47 allowed a l | |
CVE-2026-14736 |
medium | 5.5 | 0.0047 | 2026-07-05 | A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown f | |
CVE-2026-15319 |
medium | 5.5 | 0.0054 | 2026-07-10 | A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function | |
CVE-2026-15488 |
medium | 5.5 | 0.0050 | 2026-07-12 | A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileCon | |
CVE-2026-15677 |
medium | 5.5 | 0.0050 | 2026-07-14 | A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown funct | |
CVE-2026-16201 |
medium | 5.5 | 0.0053 | 2026-07-19 | A vulnerability was found in zevorn rt-claw up to 0.2.0. Affected is the function claw_net_get/claw_ | |
CVE-2026-16324 |
medium | 5.5 | 0.0047 | 2026-07-20 | A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is | |
CVE-2026-16327 |
medium | 5.5 | 0.0157 | 2026-07-21 | A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing o | |
CVE-2026-16329 |
medium | 5.5 | 0.0145 | 2026-07-21 | A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file | |
CVE-2026-16330 |
medium | 5.5 | 0.0157 | 2026-07-21 | A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function | |
CVE-2026-16331 |
medium | 5.5 | 0.0157 | 2026-07-21 | A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function | |
CVE-2026-16332 |
medium | 5.5 | 0.0145 | 2026-07-21 | A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file / | |
CVE-2026-16447 |
medium | 5.5 | 0.0157 | 2026-07-21 | A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file | |
CVE-2026-47062 |
medium | 5.5 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-60270 |
medium | 5.5 | 0.0034 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60630 |
medium | 5.5 | 0.0015 | 2026-07-21 | Vulnerability in Oracle APEX (component: Installation). Supported versions that are affected are 24 | |
CVE-2026-43763 |
medium | 5.5 | 0.0015 | 2026-07-27 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequ | |
CVE-2026-43819 |
medium | 5.5 | 0.0016 | 2026-07-27 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tah | |
CVE-2026-64723 |
medium | 5.5 | 0.0015 | 2026-07-27 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7 | |
CVE-2026-18788 |
medium | 5.5 | 0.0050 | 2026-08-04 | A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted eleme | |
CVE-2026-18969 |
medium | 5.5 | 0.0047 | 2026-08-06 | A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20 | |
CVE-2026-18974 |
medium | 5.5 | 0.0053 | 2026-08-06 | A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get | |
CVE-2026-19356 |
medium | 5.5 | 0.0048 | 2026-08-09 | A vulnerability was identified in MingSoft MCMS up to 3.0.6. This impacts an unknown function of the | |
CVE-2026-19357 |
medium | 5.5 | 0.0048 | 2026-08-09 | A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown function of | |
CVE-2026-62553 |
medium | 5.5 | 0.0015 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-62564 |
medium | 5.5 | 0.0015 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-62573 |
medium | 5.5 | 0.0015 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-70836 |
medium | 5.5 | 0.0015 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-71033 |
medium | 5.5 | 0.0015 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-78202 |
medium | 5.5 | 0.0050 | 2026-08-24 | A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_setting |