Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1099)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-91230 |
critical | 9.3 | 0.0034 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-65760 |
critical | 9.2 | 0.0042 | 2026-07-23 | Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy | |
CVE-2026-65889 |
critical | 9.2 | 0.0044 | 2026-07-29 | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generat | |
CVE-2026-54213 |
critical | 9.2 | 0.0071 | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server | |
CVE-2023-24215 |
critical | 9.1 | 0.0024 | 2026-05-18 | Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unaut | |
CVE-2026-91241 |
critical | 9.1 | 0.0032 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-91341 |
critical | 9.1 | 0.0041 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91655 |
critical | 9.1 | 0.0021 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-91656 |
critical | 9.1 | 0.0020 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is a | |
CVE-2026-66309 |
critical | 9.1 | 0.0086 | 2026-08-20 | Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges ov | |
CVE-2026-39339 |
critical | 9.1 | 0.0135 | 2026-04-07 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a critical authentication byp | |
CVE-2026-34287 |
critical | 9.1 | 0.0035 | 2026-04-21 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-49002 |
critical | 9.1 | 0.0029 | 2026-05-27 | Access control failure means that an application does not effectively check user access permissions, | |
CVE-2026-45177 |
critical | 9.1 | 0.0050 | 2026-06-11 | Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its int | |
CVE-2026-35270 |
critical | 9.1 | 0.0050 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-35298 |
critical | 9.1 | 0.0046 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Support | |
CVE-2026-46777 |
critical | 9.1 | 0.0043 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-46784 |
critical | 9.1 | 0.0043 | 2026-06-17 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-46809 |
critical | 9.1 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-46858 |
critical | 9.1 | 0.0045 | 2026-06-17 | Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager ( | |
CVE-2026-46875 |
critical | 9.1 | 0.0046 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-46892 |
critical | 9.1 | 0.0040 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edward | |
CVE-2026-46896 |
critical | 9.1 | 0.0046 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite ( | |
CVE-2026-46910 |
critical | 9.1 | 0.0035 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-46930 |
critical | 9.1 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Bu | |
CVE-2026-46944 |
critical | 9.1 | 0.0045 | 2026-06-17 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operati | |
CVE-2026-46945 |
critical | 9.1 | 0.0046 | 2026-06-17 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operati | |
CVE-2026-46946 |
critical | 9.1 | 0.0046 | 2026-06-17 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operati | |
CVE-2026-46949 |
critical | 9.1 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (componen | |
CVE-2026-54400 |
critical | 9.1 | 0.0052 | 2026-07-02 | A malicious actor with access to the network and high privileges could exploit an Improper Access Co | |
CVE-2026-20706 |
critical | 9.1 | 0.0059 | 2026-07-03 | Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope c | |
CVE-2026-26247 |
critical | 9.1 | 0.0050 | 2026-07-03 | Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during a | |
CVE-2026-62414 |
critical | 9.1 | 0.0040 | 2026-07-20 | Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla ext | |
CVE-2026-28304 |
critical | 9.1 | 0.0079 | 2026-07-21 | SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can all | |
CVE-2026-28306 |
critical | 9.1 | 0.0050 | 2026-07-21 | SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administr | |
CVE-2026-28307 |
critical | 9.1 | 0.0050 | 2026-07-21 | SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user grou | |
CVE-2026-28321 |
critical | 9.1 | 0.0058 | 2026-07-21 | SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary fi | |
CVE-2026-46989 |
critical | 9.1 | 0.0032 | 2026-07-21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-60168 |
critical | 9.1 | 0.0045 | 2026-07-21 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (c | |
CVE-2026-60267 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60438 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl). S | |
CVE-2026-60606 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSof | |
CVE-2026-60649 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-61059 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (compon | |
CVE-2026-61130 |
critical | 9.1 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat | |
CVE-2026-61153 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61155 |
critical | 9.1 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-61156 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-61171 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su | |
CVE-2026-61184 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply |