Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-91453 |
medium | 5.3 | 0.0029 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-116108 |
medium | 5.3 | 0.0026 | 2026-10-26 | A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the fi | |
CVE-2026-116113 |
medium | 5.3 | 0.0020 | 2026-10-26 | A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the function chu | |
CVE-2026-103298 |
medium | 5.3 | 0.0018 | 2026-10-26 | The CCAvenue Payment Gateway for WooCommerce WordPress plugin through 3.1 does not verify that a pay | |
CVE-2026-116282 |
medium | 5.3 | 0.0034 | 2026-10-26 | A security flaw has been discovered in Kameleo up to 5.3.1. Affected by this issue is the function C | |
CVE-2026-116283 |
medium | 5.3 | 0.0028 | 2026-10-26 | A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file / | |
CVE-2026-116284 |
medium | 5.3 | 0.0033 | 2026-10-26 | A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknow | |
CVE-2026-6877 |
medium | 5.3 | — | 2026-10-29 | ServiceNow has addressed a domain separation bypass security issue that was identified in the Servic | |
CVE-2026-35244 |
medium | 5.2 | 0.0016 | 2026-04-21 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-60149 |
medium | 5.2 | 0.0013 | 2026-07-21 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific | |
CVE-2026-60501 |
medium | 5.2 | 0.0014 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-55979 |
medium | 5.2 | 0.0013 | 2026-08-06 | An improper access control check in CatchPulse's named pipe communication interface could allow an a | |
CVE-2026-113706 |
medium | 5.1 | 0.0025 | 2026-10-21 | A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of | |
CVE-2026-50418 |
medium | 5.1 | 0.0027 | 2026-07-14 | Improper access control in Windows System allows an unauthorized attacker to bypass a security featu | |
CVE-2025-40939 |
medium | 5.1 | 0.0021 | 2025-12-09 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device | |
CVE-2026-16226 |
medium | 5.1 | 0.0038 | 2026-07-19 | A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the func | |
CVE-2026-12702 |
medium | 5.1 | 0.0033 | 2026-07-24 | In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an | |
CVE-2026-19359 |
medium | 5.1 | 0.0038 | 2026-08-09 | A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this is | |
CVE-2026-71570 |
medium | 5.1 | 0.0041 | 2026-08-14 | Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A | |
CVE-2026-72532 |
medium | 5.1 | 0.0026 | 2026-08-18 | Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5. | |
CVE-2026-73371 |
medium | 5.1 | 0.0029 | 2026-08-18 | Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0- | |
CVE-2026-72531 |
medium | 5.1 | 0.0026 | 2026-08-18 | Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0 | |
CVE-2026-73372 |
medium | 5.1 | 0.0029 | 2026-08-18 | Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1 | |
CVE-2026-35248 |
medium | 5.0 | 0.0010 | 2026-04-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-60907 |
medium | 5.0 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite | |
CVE-2026-62486 |
medium | 5.0 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int | |
CVE-2026-62460 |
medium | 5.0 | 0.0027 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-91536 |
medium | 5.0 | 0.0020 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-101385 |
medium | 4.9 | 0.0031 | 2026-10-20 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected | |
CVE-2026-101731 |
medium | 4.9 | 0.0046 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz | |
CVE-2026-101732 |
medium | 4.9 | 0.0046 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz | |
CVE-2026-101749 |
medium | 4.9 | 0.0044 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Securit | |
CVE-2026-101750 |
medium | 4.9 | 0.0044 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone P | |
CVE-2026-101751 |
medium | 4.9 | 0.0044 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group R | |
CVE-2026-70217 |
medium | 4.9 | 0.0097 | 2026-10-13 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose inf | |
CVE-2026-35234 |
medium | 4.9 | 0.0030 | 2026-04-21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported | |
CVE-2026-35235 |
medium | 4.9 | 0.0030 | 2026-04-21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versi | |
CVE-2026-35236 |
medium | 4.9 | 0.0024 | 2026-04-21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions t | |
CVE-2026-35237 |
medium | 4.9 | 0.0024 | 2026-04-21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions t | |
CVE-2026-35238 |
medium | 4.9 | 0.0024 | 2026-04-21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions t | |
CVE-2026-35239 |
medium | 4.9 | 0.0024 | 2026-04-21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versi | |
CVE-2026-35240 |
medium | 4.9 | 0.0024 | 2026-04-21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported | |
CVE-2026-44874 |
medium | 4.9 | 0.0031 | 2026-05-12 | A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow a | |
CVE-2026-47049 |
medium | 4.9 | 0.0040 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA | |
CVE-2026-101721 |
medium | 4.9 | 0.0045 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Compone | |
CVE-2026-101724 |
medium | 4.9 | 0.0045 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Suppo | |
CVE-2026-101727 |
medium | 4.9 | 0.0045 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replica | |
CVE-2026-101729 |
medium | 4.9 | 0.0043 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replica | |
CVE-2026-101730 |
medium | 4.9 | 0.0045 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz | |
CVE-2026-101756 |
medium | 4.9 | 0.0043 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). |