Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1098)
CWE-22 (1025)
CWE-125 (884)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (688)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-46906 |
critical | 9.6 | 0.0034 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-46911 |
critical | 9.6 | 0.0027 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Project Costing product of Oracle JD Edwards (componen | |
CVE-2026-60239 |
critical | 9.6 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60540 |
critical | 9.6 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Bu | |
CVE-2026-60564 |
critical | 9.6 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime | |
CVE-2026-60773 |
critical | 9.6 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component | |
CVE-2026-61097 |
critical | 9.6 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle Banking Trade Finance Process Management product of Oracle Financial Ser | |
CVE-2026-62549 |
critical | 9.6 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). S | |
CVE-2026-60861 |
critical | 9.6 | 0.0036 | 2026-08-18 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60905 |
critical | 9.6 | 0.0038 | 2026-08-18 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-61001 |
critical | 9.6 | 0.0036 | 2026-08-18 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web | |
CVE-2026-62463 |
critical | 9.6 | 0.0036 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-62582 |
critical | 9.6 | 0.0036 | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Secu | |
CVE-2026-70846 |
critical | 9.6 | 0.0036 | 2026-08-18 | Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Oper | |
CVE-2026-71063 |
critical | 9.6 | 0.0040 | 2026-08-18 | Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions t | |
CVE-2026-71064 |
critical | 9.6 | 0.0040 | 2026-08-18 | Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions t | |
CVE-2026-91218 |
critical | 9.6 | 0.0037 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-5779 |
critical | 9.4 | 0.0025 | 2026-04-28 | An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in | |
CVE-2026-42812 |
critical | 9.4 | 0.0037 | 2026-05-04 | In Apache Iceberg, the table's metadata files are control files: they tell readers which data files | |
CVE-2026-7813 |
critical | 9.4 | 0.0046 | 2026-05-11 | Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Server | |
CVE-2026-61186 |
critical | 9.4 | 0.0041 | 2026-07-21 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-61203 |
critical | 9.4 | 0.0046 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Exp | |
CVE-2026-62629 |
critical | 9.4 | 0.0041 | 2026-08-18 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Securi | |
CVE-2026-71166 |
critical | 9.4 | 0.0046 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-71167 |
critical | 9.4 | 0.0046 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-73920 |
critical | 9.4 | 0.0046 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-76311 |
critical | 9.4 | 0.0045 | 2026-08-19 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who | |
CVE-2026-103093 |
critical | 9.4 | — | 2026-10-29 | ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI P | |
CVE-2026-91644 |
critical | 9.3 | 0.0022 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-102789 |
critical | 9.3 | 0.0032 | 2026-10-27 | Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < | |
CVE-2026-44225 |
critical | 9.3 | 0.0154 | 2026-05-12 | Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to 0.1.1, Pu | |
CVE-2026-35305 |
critical | 9.3 | 0.0034 | 2026-06-17 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Th | |
CVE-2026-35306 |
critical | 9.3 | 0.0035 | 2026-06-17 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Th | |
CVE-2026-46795 |
critical | 9.3 | 0.0039 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-46805 |
critical | 9.3 | 0.0039 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-46912 |
critical | 9.3 | 0.0027 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run | |
CVE-2026-46913 |
critical | 9.3 | 0.0014 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-48616 |
critical | 9.3 | 0.0033 | 2026-06-17 | Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access contro | |
CVE-2026-20744 |
critical | 9.3 | 0.0076 | 2026-07-10 | The charging station websocket endpoint accepts connections without proper authentication, which co | |
CVE-2026-60220 |
critical | 9.3 | 0.0038 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60631 |
critical | 9.3 | 0.0020 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60632 |
critical | 9.3 | 0.0038 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-61207 |
critical | 9.3 | 0.0035 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: | |
CVE-2026-62618 |
critical | 9.3 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Securi | |
CVE-2026-70673 |
critical | 9.3 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Securi | |
CVE-2026-70855 |
critical | 9.3 | 0.0036 | 2026-08-18 | Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Tr | |
CVE-2026-70998 |
critical | 9.3 | 0.0035 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-71037 |
critical | 9.3 | 0.0038 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-71065 |
critical | 9.3 | 0.0035 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-91622 |
critical | 9.3 | 0.0022 | 2026-10-20 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply |