Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-91559 |
medium | 4.4 | 0.0009 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (co | |
CVE-2026-91562 |
medium | 4.4 | 0.0009 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (compon | |
CVE-2026-87352 |
medium | 4.4 | 0.0013 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP | |
CVE-2026-106484 |
medium | 4.4 | 0.0013 | 2026-10-28 | Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allo | |
CVE-2026-77173 |
medium | 4.3 | 0.0021 | 2026-10-27 | A user could create a docx or odt file with a # in the filename with confidential information such a | |
CVE-2026-82984 |
medium | 4.3 | 0.0027 | 2026-10-27 | When a team was configured as "visible to everyone", the web UI correctly blocked non-members from v | |
CVE-2026-118318 |
medium | 4.3 | 0.0017 | 2026-10-27 | Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to r | |
CVE-2026-4628 |
medium | 4.3 | 0.0026 | 2026-03-23 | A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak’s User-Managed Ac | |
CVE-2026-20203 |
medium | 4.3 | 0.0015 | 2026-04-15 | In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform ve | |
CVE-2026-29197 |
medium | 4.3 | 0.0018 | 2026-04-24 | In versions <8.4.0, <8.3.2, <8.2.2, <8.1.3, <8.0.4, <7.13.6, <7.12.7, <7.11.7, and <7.10.10, the end | |
CVE-2026-40020 |
medium | 4.3 | 0.0026 | 2026-05-12 | Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file | |
CVE-2026-28374 |
medium | 4.3 | 0.0020 | 2026-05-13 | Editors could delete any annotation, even those they do not have read access to. The editor user can | |
CVE-2026-8566 |
medium | 4.3 | 0.0018 | 2026-05-14 | Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allo | |
CVE-2026-11890 |
medium | 4.3 | 0.0023 | 2026-06-16 | Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 | |
CVE-2026-34912 |
medium | 4.3 | 0.0027 | 2026-06-23 | A missing access control check when linking banners or campaigns to a zone through the zone-include. | |
CVE-2026-34913 |
medium | 4.3 | 0.0027 | 2026-06-23 | A missing access control check when linking trackers to campaigns through the campaign-trackers.php | |
CVE-2026-44957 |
medium | 4.3 | 0.0027 | 2026-06-23 | A missing access control check when invoking various modify methods in the XML‑RPC API of Revive Ads | |
CVE-2026-50739 |
medium | 4.3 | 0.0049 | 2026-06-26 | A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the | |
CVE-2026-50744 |
medium | 4.3 | 0.0029 | 2026-06-26 | A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response | |
CVE-2026-14003 |
medium | 4.3 | 0.0019 | 2026-06-30 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an att | |
CVE-2026-14034 |
medium | 4.3 | 0.0030 | 2026-06-30 | Inappropriate implementation in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a r | |
CVE-2026-14052 |
medium | 4.3 | 0.0028 | 2026-06-30 | Insufficient policy enforcement in FileSystem in Google Chrome prior to 150.0.7871.47 allowed a remo | |
CVE-2026-41123 |
medium | 4.3 | 0.0025 | 2026-07-03 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through | |
CVE-2026-16454 |
medium | 4.3 | 0.0036 | 2026-07-21 | In Eclipse hawkBit versions 1.0.3 and prior, a privilege escalation vulnerability (CWE-284 / CWE-862 | |
CVE-2026-21954 |
medium | 4.3 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (co | |
CVE-2026-46980 |
medium | 4.3 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applicat | |
CVE-2026-62483 |
medium | 4.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Interna | |
CVE-2026-17781 |
medium | 4.3 | 0.0019 | 2026-07-30 | Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attack | |
CVE-2026-17944 |
medium | 4.3 | 0.0024 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe | |
CVE-2026-17961 |
medium | 4.3 | 0.0024 | 2026-07-30 | Inappropriate implementation in Session in Google Chrome on Android prior to 151.0.7922.72 allowed a | |
CVE-2026-17976 |
medium | 4.3 | 0.0019 | 2026-07-30 | Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an att | |
CVE-2026-17994 |
medium | 4.3 | 0.0024 | 2026-07-30 | Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a r | |
CVE-2026-18004 |
medium | 4.3 | 0.0025 | 2026-07-30 | Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-59763 |
medium | 4.3 | 0.0029 | 2026-08-13 | Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads | |
CVE-2026-70683 |
medium | 4.3 | 0.0027 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-71124 |
medium | 4.3 | 0.0033 | 2026-08-18 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authoriza | |
CVE-2026-101722 |
medium | 4.3 | 0.0030 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connect | |
CVE-2026-101734 |
medium | 4.3 | 0.0030 | 2026-10-20 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-91399 |
medium | 4.3 | 0.0019 | 2026-10-20 | Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construc | |
CVE-2026-107686 |
medium | 4.3 | 0.0024 | 2026-10-18 | The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locke | |
CVE-2026-101382 |
medium | 4.2 | 0.0018 | 2026-10-20 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected | |
CVE-2026-101386 |
medium | 4.2 | 0.0018 | 2026-10-20 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected | |
CVE-2026-91209 |
medium | 4.2 | 0.0009 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The su | |
CVE-2026-91356 |
medium | 4.2 | 0.0014 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSo | |
CVE-2026-12460 |
medium | 4.2 | 0.0015 | 2026-06-17 | Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allow | |
CVE-2026-60709 |
medium | 4.2 | 0.0024 | 2026-07-21 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-60760 |
medium | 4.2 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (componen | |
CVE-2026-62489 |
medium | 4.2 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int | |
CVE-2026-70793 |
medium | 4.2 | 0.0019 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Serv | |
CVE-2026-70963 |
medium | 4.2 | 0.0019 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component |