Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-61264 |
medium | 5.4 | 0.0023 | 2026-07-21 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: RD | |
CVE-2026-62479 |
medium | 5.4 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: | |
CVE-2026-62482 |
medium | 5.4 | 0.0023 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: | |
CVE-2026-64871 |
medium | 5.4 | 0.0013 | 2026-07-23 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Clea | |
CVE-2026-62441 |
medium | 5.4 | 0.0023 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-62603 |
medium | 5.4 | 0.0029 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-70759 |
medium | 5.4 | 0.0024 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Serv | |
CVE-2026-70766 |
medium | 5.4 | 0.0024 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Serv | |
CVE-2026-71165 |
medium | 5.4 | 0.0023 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-73874 |
medium | 5.4 | 0.0023 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-73881 |
medium | 5.4 | 0.0023 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-73911 |
medium | 5.4 | 0.0023 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-73913 |
medium | 5.4 | 0.0023 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-73919 |
medium | 5.4 | 0.0023 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-101709 |
medium | 5.4 | 0.0023 | 2026-10-20 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-101713 |
medium | 5.4 | 0.0023 | 2026-10-20 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server) | |
CVE-2026-101821 |
medium | 5.4 | 0.0019 | 2026-10-20 | Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: To | |
CVE-2026-91481 |
medium | 5.4 | 0.0019 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: S | |
CVE-2026-91518 |
medium | 5.4 | 0.0017 | 2026-10-20 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Securi | |
CVE-2026-91523 |
medium | 5.4 | 0.0019 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-91590 |
medium | 5.4 | 0.0015 | 2026-10-20 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). | |
CVE-2023-37749 |
medium | 5.3 | 0.0035 | 2025-10-27 | Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attacke | |
CVE-2026-87388 |
medium | 5.3 | 0.0023 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: | |
CVE-2026-87415 |
medium | 5.3 | 0.0028 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Repo | |
CVE-2026-91276 |
medium | 5.3 | 0.0022 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: | |
CVE-2026-91497 |
medium | 5.3 | 0.0029 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Upda | |
CVE-2026-114574 |
medium | 5.3 | 0.0031 | 2026-10-21 | A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown funct | |
CVE-2026-103382 |
medium | 5.3 | 0.0023 | 2026-10-28 | The Casso Flow WordPress plugin before 4.2.0 does not properly authenticate incoming bank-transfer | |
CVE-2026-106003 |
medium | 5.3 | 0.0027 | 2026-10-28 | The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentica | |
CVE-2026-115255 |
medium | 5.3 | 0.0023 | 2026-10-28 | The WP Roster WordPress plugin before 2.35 does not perform any capability or nonce checks on one of | |
CVE-2026-118578 |
medium | 5.3 | 0.0022 | 2026-10-28 | A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected el | |
CVE-2026-31950 |
medium | 5.3 | 0.0022 | 2026-03-27 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2-rc3, the | |
CVE-2026-40252 |
medium | 5.3 | 0.0034 | 2026-04-10 | FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulnerability (I | |
CVE-2026-40304 |
medium | 5.3 | 0.0029 | 2026-04-17 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the | |
CVE-2026-34082 |
medium | 5.3 | 0.0019 | 2026-04-20 | Dify is an open-source LLM app development platform. Prior to 1.13.1, the method `DELETE /console/ap | |
CVE-2026-42177 |
medium | 5.3 | 0.0023 | 2026-05-12 | linux-entra-sso is a browser plugin for Linux to SSO on Microsoft Entra ID. Prior to 1.8.1, platform | |
CVE-2026-44341 |
medium | 5.3 | 0.0029 | 2026-05-12 | GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval endpoint that | |
CVE-2026-44352 |
medium | 5.3 | 0.0026 | 2026-05-12 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, tr | |
CVE-2026-32994 |
medium | 5.3 | 0.0025 | 2026-05-19 | The /api/v1/autotranslate.translateMessage endpoint in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1 | |
CVE-2026-13933 |
medium | 5.3 | 0.0027 | 2026-06-30 | Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remot | |
CVE-2026-20909 |
medium | 5.3 | 0.0039 | 2026-07-03 | Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries. | |
CVE-2026-56217 |
medium | 5.3 | 0.0026 | 2026-07-08 | Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforcement that | |
CVE-2026-46984 |
medium | 5.3 | 0.0032 | 2026-07-21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-46985 |
medium | 5.3 | 0.0032 | 2026-07-21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-46986 |
medium | 5.3 | 0.0032 | 2026-07-21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-47027 |
medium | 5.3 | 0.0029 | 2026-07-21 | Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Or | |
CVE-2026-60816 |
medium | 5.3 | 0.0028 | 2026-07-21 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). S | |
CVE-2026-62507 |
medium | 5.3 | 0.0025 | 2026-07-21 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-56608 |
medium | 5.3 | 0.0027 | 2026-08-03 | HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce | |
CVE-2026-19065 |
medium | 5.3 | 0.0035 | 2026-08-06 | A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0 |