Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (879)
CWE-200 (847)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (540)
CWE-400 (528)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-60927 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: | |
CVE-2026-60931 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: | |
CVE-2026-61188 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-62493 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Opera | |
CVE-2026-54635 |
high | 7.5 | 0.0051 | 2026-07-28 | pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON | |
CVE-2026-71467 |
high | 7.5 | 0.0083 | 2026-08-11 | A flaw was found in search-v2-api. The authentication middleware in the affected component unconditi | |
CVE-2026-42018 |
high | 7.5 | 0.0980 | 2026-08-12 | JFrog Artifactory contains an improper authentication vulnerability that could return an internal an | KEV |
CVE-2026-60679 |
high | 7.5 | 0.0033 | 2026-08-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-16972 |
high | 7.5 | 0.0052 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive info | |
CVE-2026-66908 |
high | 7.5 | 0.0061 | 2026-08-24 | Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue af | |
CVE-2026-111958 |
high | 7.5 | 0.0025 | 2026-10-22 | The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single previ | |
CVE-2026-111739 |
high | 7.5 | 0.0018 | 2026-10-29 | The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Security (AIOS) WordPress | |
CVE-2026-110245 |
high | 7.5 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information | |
CVE-2026-44460 |
high | 7.4 | 0.0033 | 2026-05-27 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operatio | |
CVE-2026-55759 |
high | 7.4 | 0.0032 | 2026-06-24 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8 | |
CVE-2026-62669 |
high | 7.4 | 0.0050 | 2026-08-19 | Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prior to 3.8.11, the Gra | |
CVE-2026-55457 |
high | 7.4 | 0.0027 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-55459 |
high | 7.4 | 0.0021 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-10845 |
high | 7.3 | 0.0047 | 2026-06-22 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication | |
CVE-2026-55626 |
high | 7.3 | 0.0019 | 2026-07-20 | xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session | |
CVE-2026-65211 |
high | 7.2 | 0.0032 | 2026-10-27 | This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical me | |
CVE-2026-39976 |
high | 7.1 | 0.0029 | 2026-04-09 | Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is a | |
CVE-2026-33377 |
high | 7.1 | 0.0023 | 2026-05-13 | An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. T | |
CVE-2026-47272 |
high | 7.1 | 0.0012 | 2026-05-27 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, t | |
CVE-2026-60577 |
high | 7.1 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite ( | |
CVE-2026-60908 |
high | 7.1 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite | |
CVE-2026-61049 |
high | 7.1 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Int | |
CVE-2026-46355 |
high | 7.1 | 0.0037 | 2026-08-20 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton exposed /bigbluebu | |
CVE-2026-114638 |
high | 7.0 | 0.0022 | 2026-10-22 | Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes In | |
CVE-2026-114639 |
high | 7.0 | 0.0029 | 2026-10-22 | Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a fi | |
CVE-2026-114261 |
medium | 6.9 | 0.0051 | 2026-10-21 | A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5 | |
CVE-2026-114439 |
medium | 6.9 | 0.0054 | 2026-10-21 | A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some | |
CVE-2026-6569 |
medium | 6.9 | 0.0041 | 2026-04-19 | A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet | |
CVE-2026-44720 |
medium | 6.9 | 0.0021 | 2026-05-27 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a crit | |
CVE-2026-56080 |
medium | 6.9 | 0.0036 | 2026-06-19 | Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin en | |
CVE-2026-56312 |
medium | 6.9 | 0.0038 | 2026-07-10 | Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitation endpoin | |
CVE-2026-15491 |
medium | 6.9 | 0.0065 | 2026-07-12 | A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3a | |
CVE-2026-15542 |
medium | 6.9 | 0.0070 | 2026-07-13 | A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of | |
CVE-2026-47159 |
medium | 6.9 | 0.0047 | 2026-07-15 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO dis | |
CVE-2026-18810 |
medium | 6.9 | 0.0065 | 2026-08-04 | A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of | |
CVE-2026-105133 |
medium | 6.9 | 0.7947 | 2026-10-04 | Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker | KEV |
CVE-2026-112104 |
medium | 6.9 | 0.0063 | 2026-10-19 | A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknow | |
CVE-2026-114222 |
medium | 6.9 | 0.0014 | 2026-10-22 | NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated | |
CVE-2026-116257 |
medium | 6.9 | 0.0063 | 2026-10-26 | A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function | |
CVE-2026-106460 |
medium | 6.8 | 0.0031 | 2026-10-06 | Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, th | |
CVE-2026-48117 |
medium | 6.8 | 0.0018 | 2026-06-17 | DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io wa | |
CVE-2026-114618 |
medium | 6.8 | 0.0022 | 2026-10-22 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the defau | |
CVE-2026-84296 |
medium | 6.8 | — | 2026-10-29 | Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server | |
CVE-2026-91467 |
medium | 6.6 | 0.0019 | 2026-10-20 | Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component | |
CVE-2026-55369 |
medium | 6.5 | 0.0026 | 2026-10-28 | Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /a |