Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-62577 |
low | 3.3 | 0.0014 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-70853 |
low | 3.3 | 0.0027 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70962 |
low | 3.3 | 0.0014 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-71072 |
low | 3.3 | 0.0014 | 2026-08-18 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX | |
CVE-2026-71089 |
low | 3.3 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX | |
CVE-2026-101790 |
low | 3.3 | 0.0013 | 2026-10-20 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communica | |
CVE-2026-101805 |
low | 3.3 | 0.0026 | 2026-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diag | |
CVE-2026-106073 |
low | 3.3 | 0.0025 | 2026-10-23 | A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the req | |
CVE-2026-35249 |
low | 3.2 | 0.0011 | 2026-04-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-47055 |
low | 3.2 | 0.0015 | 2026-07-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-33212 |
low | 3.1 | 0.0022 | 2026-04-15 | Weblate is a web based localization tool. In versions prior to 5.17, the tasks API didn't verify use | |
CVE-2026-6312 |
low | 3.1 | 0.0022 | 2026-04-15 | Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remo | |
CVE-2026-6313 |
low | 3.1 | 0.0022 | 2026-04-15 | Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote at | |
CVE-2026-7959 |
low | 3.1 | 0.0019 | 2026-05-06 | Inappropriate implementation in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote | |
CVE-2026-8545 |
low | 3.1 | 0.0016 | 2026-05-14 | Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote attacker | |
CVE-2026-8556 |
low | 3.1 | 0.0020 | 2026-05-14 | Inappropriate implementation in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a | |
CVE-2026-47030 |
low | 3.1 | 0.0025 | 2026-07-21 | Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora | |
CVE-2026-47034 |
low | 3.1 | 0.0025 | 2026-07-21 | Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora | |
CVE-2026-47035 |
low | 3.1 | 0.0025 | 2026-07-21 | Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora | |
CVE-2026-60353 |
low | 3.1 | 0.0022 | 2026-07-21 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). | |
CVE-2026-60929 |
low | 3.1 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: | |
CVE-2026-60937 |
low | 3.1 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Intern | |
CVE-2026-62461 |
low | 3.1 | 0.0024 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-62604 |
low | 3.1 | 0.0025 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-62606 |
low | 3.1 | 0.0022 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-70851 |
low | 3.1 | 0.0026 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-101738 |
low | 3.1 | 0.0022 | 2026-10-20 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-62511 |
low | 3.0 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-62570 |
low | 3.0 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-62583 |
low | 3.0 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-70850 |
low | 3.0 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-71144 |
low | 3.0 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-7041 |
low | 2.9 | 0.0041 | 2026-04-26 | A vulnerability was detected in 666ghj MiroFish up to 0.1.2. The impacted element is an unknown func | |
CVE-2026-8028 |
low | 2.9 | 0.0040 | 2026-05-06 | A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of | |
CVE-2026-70430 |
low | 2.7 | 0.0031 | 2026-08-05 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can b | |
CVE-2026-101779 |
low | 2.7 | 0.0027 | 2026-10-20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemet | |
CVE-2026-47032 |
low | 2.6 | 0.0024 | 2026-07-21 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Redwood UI). Supp | |
CVE-2026-62580 |
low | 2.6 | 0.0021 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-70776 |
low | 2.6 | 0.0019 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Serv | |
CVE-2026-70919 |
low | 2.5 | 0.0013 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-71082 |
low | 2.5 | 0.0012 | 2026-08-18 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX | |
CVE-2026-101804 |
low | 2.5 | 0.0011 | 2026-10-20 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The sup | |
CVE-2026-34312 |
low | 2.4 | 0.0020 | 2026-04-21 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte | |
CVE-2026-35250 |
low | 2.3 | 0.0011 | 2026-04-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-42158 |
low | 2.3 | 0.0021 | 2026-05-12 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, tr | |
CVE-2026-63641 |
low | 2.3 | 0.0043 | 2026-08-18 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, MagicMirror applies i | |
CVE-2026-60190 |
low | 2.2 | 0.0030 | 2026-07-21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replica | |
CVE-2026-76800 |
low | 2.1 | 0.0035 | 2026-08-20 | A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of th | |
CVE-2026-1879 |
low | 2.1 | 0.0026 | 2026-04-01 | A vulnerability was detected in Harvard University IQSS Dataverse up to 6.8. This affects an unknown | |
CVE-2026-5670 |
low | 2.1 | 0.0021 | 2026-04-06 | A vulnerability was found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e62 |