Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1966)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1130)
CWE-89 (1129)
CWE-125 (1089)
CWE-22 (1054)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (665)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-61204 |
critical | 9.0 | 0.0018 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft (comp | |
CVE-2026-61223 |
critical | 9.0 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communicat | |
CVE-2026-20267 |
critical | 9.0 | 0.0038 | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So | |
CVE-2026-61029 |
critical | 9.0 | 0.0039 | 2026-08-18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-70980 |
critical | 9.0 | 0.0039 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-54305 |
high | 8.9 | 0.0037 | 2026-06-23 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE | |
CVE-2026-54526 |
high | 8.9 | 0.0055 | 2026-07-16 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on | |
CVE-2026-43945 |
high | 8.9 | 0.0084 | 2026-07-21 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3. | |
CVE-2025-52079 |
high | 8.8 | 0.0054 | 2025-10-21 | The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and | |
CVE-2024-36323 |
high | 8.8 | 0.0010 | 2026-05-15 | Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) | |
CVE-2026-83402 |
high | 8.8 | 0.0040 | 2026-10-20 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-83403 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-87310 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Databas | |
CVE-2026-87364 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supp | |
CVE-2026-87397 |
high | 8.8 | 0.0036 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91268 |
high | 8.8 | 0.0029 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run | |
CVE-2026-91326 |
high | 8.8 | 0.0021 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-91340 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-47301 |
high | 8.8 | 0.0078 | 2026-07-14 | Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate | 1 PoC |
CVE-2026-50342 |
high | 8.8 | 0.0030 | 2026-07-14 | Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate priv | |
CVE-2026-65668 |
high | 8.8 | 0.0078 | 2026-08-06 | Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate pri | |
CVE-2026-102860 |
high | 8.8 | 0.0081 | 2026-10-13 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate priv | |
CVE-2026-34570 |
high | 8.8 | 0.0051 | 2026-04-01 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture w | |
CVE-2026-34572 |
high | 8.8 | 0.0051 | 2026-04-01 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture w | |
CVE-2026-39386 |
high | 8.8 | 0.0044 | 2026-04-21 | Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 throug | |
CVE-2026-33318 |
high | 8.8 | 0.0047 | 2026-04-24 | Actual is a local-first personal finance tool. Prior to version 26.4.0, any authenticated user (incl | |
CVE-2026-5141 |
high | 8.8 | 0.0023 | 2026-04-29 | Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability | |
CVE-2026-5786 |
high | 8.8 | 0.1120 | 2026-05-07 | An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8 | |
CVE-2026-42278 |
high | 8.8 | 0.0045 | 2026-05-08 | UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine | |
CVE-2026-28978 |
high | 8.8 | 0.0014 | 2026-05-11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia | |
CVE-2026-40420 |
high | 8.8 | 0.0021 | 2026-05-12 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | |
CVE-2026-41086 |
high | 8.8 | 0.0043 | 2026-05-12 | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges | |
CVE-2026-35311 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Support | |
CVE-2026-35315 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-35317 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-35318 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-35322 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-35324 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-35325 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-46864 |
high | 8.8 | 0.0043 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-46886 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S | |
CVE-2026-46916 |
high | 8.8 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business S | |
CVE-2026-46921 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-46926 |
high | 8.8 | 0.0012 | 2026-06-17 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-46929 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Plan | |
CVE-2026-46931 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (componen | |
CVE-2026-46940 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Plan | |
CVE-2026-46942 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Process Manufacturing Process Planning product of Oracle E-Business Suit | |
CVE-2026-46947 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (componen | |
CVE-2026-46950 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (componen |