Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (879)
CWE-200 (847)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (540)
CWE-400 (528)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-71078 |
medium | 4.2 | 0.0011 | 2026-08-18 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX | |
CVE-2026-71147 |
medium | 4.2 | 0.0022 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-71149 |
medium | 4.2 | 0.0011 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-73873 |
medium | 4.2 | 0.0019 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-60874 |
medium | 4.2 | 0.0025 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port | |
CVE-2026-46771 |
medium | 4.1 | 0.0014 | 2026-06-17 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middlew | |
CVE-2026-60832 |
medium | 4.1 | 0.0023 | 2026-07-21 | Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Inte | |
CVE-2026-62584 |
medium | 4.0 | 0.0017 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-101404 |
low | 3.9 | 0.0013 | 2026-10-20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S | |
CVE-2026-91436 |
low | 3.9 | 0.0011 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91331 |
low | 3.8 | 0.0024 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSof | |
CVE-2026-22014 |
low | 3.8 | 0.0019 | 2026-04-21 | Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Workflow | |
CVE-2026-61036 |
low | 3.8 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Norway Payr | |
CVE-2026-62532 |
low | 3.8 | 0.0026 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-91485 |
low | 3.8 | 0.0010 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (compone | |
CVE-2026-85007 |
low | 3.8 | 0.0013 | 2026-10-29 | The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on i | |
CVE-2026-91264 |
low | 3.7 | 0.0023 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component | |
CVE-2026-60346 |
low | 3.7 | 0.0031 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interop | |
CVE-2026-60628 |
low | 3.7 | 0.0023 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-63235 |
low | 3.7 | 0.0031 | 2026-07-29 | An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to forci | |
CVE-2026-63236 |
low | 3.7 | 0.0026 | 2026-07-29 | An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to read | |
CVE-2026-62533 |
low | 3.7 | 0.0026 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-70682 |
low | 3.7 | 0.0026 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-70785 |
low | 3.7 | 0.0026 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Serv | |
CVE-2026-70848 |
low | 3.7 | 0.0026 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-71080 |
low | 3.7 | 0.0023 | 2026-08-18 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX | |
CVE-2026-73923 |
low | 3.7 | 0.0025 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-91471 |
low | 3.7 | 0.0019 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSof | |
CVE-2026-113674 |
low | 3.7 | 0.0021 | 2026-10-24 | The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings su | |
CVE-2026-91291 |
low | 3.6 | 0.0010 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Busines | |
CVE-2026-91301 |
low | 3.6 | 0.0010 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitor | |
CVE-2026-60144 |
low | 3.6 | 0.0011 | 2026-07-21 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific | |
CVE-2026-60338 |
low | 3.6 | 0.0011 | 2026-07-21 | Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM | |
CVE-2026-60347 |
low | 3.6 | 0.0011 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-101740 |
low | 3.6 | 0.0012 | 2026-10-20 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-91397 |
low | 3.6 | 0.0009 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-106071 |
low | 3.6 | 0.0020 | 2026-10-23 | A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not matc | |
CVE-2026-67400 |
low | 3.5 | 0.0018 | 2026-10-27 | A missing token type check allowed to retrieve more additional information about the WOPI configurat | |
CVE-2026-77171 |
low | 3.5 | 0.0016 | 2026-10-27 | A public shared collective always allowed recipients of the link to create pages. | |
CVE-2026-62529 |
low | 3.5 | 0.0023 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-60847 |
low | 3.4 | 0.0015 | 2026-07-21 | Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite (component: Internal Oper | |
CVE-2026-62569 |
low | 3.4 | 0.0015 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-71140 |
low | 3.4 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-28910 |
low | 3.3 | 0.0012 | 2026-05-11 | This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4 | |
CVE-2026-28957 |
low | 3.3 | 0.0012 | 2026-05-11 | An issue with app access to camera metadata was addressed with improved logic. This issue is fixed i | |
CVE-2026-48936 |
low | 3.3 | 0.0014 | 2026-06-26 | A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), | |
CVE-2026-21953 |
low | 3.3 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (co | |
CVE-2026-61071 |
low | 3.3 | 0.0021 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Engineering Argentina product of Oracle PeopleSoft (c | |
CVE-2026-58039 |
low | 3.3 | 0.0015 | 2026-07-31 | A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files o | |
CVE-2026-62526 |
low | 3.3 | 0.0026 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component |