Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-113682 |
critical | 9.1 | 0.0056 | 2026-10-20 | Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicA | |
CVE-2026-101590 |
critical | 9.1 | 0.0042 | 2026-10-20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-se | |
CVE-2026-91265 |
critical | 9.1 | 0.0042 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-91305 |
critical | 9.1 | 0.0042 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-114607 |
critical | 9.1 | 0.0042 | 2026-10-22 | Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until | |
CVE-2026-114616 |
critical | 9.1 | 0.0021 | 2026-10-22 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's | |
CVE-2026-116163 |
critical | 9.1 | 0.0028 | 2026-10-25 | Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass becaus | |
CVE-2026-86868 |
critical | 9.1 | 0.0020 | 2026-10-20 | An authentication issue was addressed with improved state management. This issue is fixed in macOS G | |
CVE-2026-87263 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-91259 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-62827 |
high | 8.8 | 0.0094 | 2026-08-11 | Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate priv | |
CVE-2026-46903 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Busines | |
CVE-2026-46916 |
high | 8.8 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business S | |
CVE-2026-46921 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-46928 |
high | 8.8 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Interna | |
CVE-2026-46929 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Plan | |
CVE-2026-46937 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Upd | |
CVE-2026-46940 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Plan | |
CVE-2026-46942 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Process Manufacturing Process Planning product of Oracle E-Business Suit | |
CVE-2026-46951 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-46952 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-46961 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component | |
CVE-2026-46962 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component | |
CVE-2026-46972 |
high | 8.8 | 0.0030 | 2026-06-17 | Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suit | |
CVE-2026-46973 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suit | |
CVE-2026-32174 |
high | 8.8 | 0.0077 | 2026-06-18 | Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges ove | |
CVE-2026-58253 |
high | 8.8 | 0.0037 | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Pr | |
CVE-2026-59822 |
high | 8.8 | 0.0084 | 2026-07-08 | BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoin | KEV |
CVE-2026-61435 |
high | 8.8 | 0.0049 | 2026-07-15 | PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints | |
CVE-2026-61436 |
high | 8.8 | 0.0039 | 2026-07-15 | PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing | |
CVE-2026-47037 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-60423 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co | |
CVE-2026-60464 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-60583 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Ins | |
CVE-2026-60654 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-60678 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-60863 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing | |
CVE-2026-60872 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product | |
CVE-2026-60890 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-60897 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-60898 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Inte | |
CVE-2026-60901 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Inte | |
CVE-2026-60920 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Op | |
CVE-2026-60924 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Int | |
CVE-2026-60932 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Intern | |
CVE-2026-60952 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: | |
CVE-2026-60989 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Inte | |
CVE-2026-61010 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (compon | |
CVE-2026-61098 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-61099 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon |