Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (542)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-70924 |
high | 8.1 | 0.0039 | 2026-08-18 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web | |
CVE-2026-71068 |
high | 8.1 | 0.0039 | 2026-08-18 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX | |
CVE-2026-91546 |
high | 8.1 | 0.0027 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-79887 |
high | 8.1 | 0.0059 | 2026-10-22 | A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achi | |
CVE-2026-0204 |
high | 8.0 | 0.0038 | 2026-04-29 | A vulnerability in the access control mechanism of SonicOS may allow certain management interface fu | |
CVE-2026-60652 |
high | 8.0 | 0.0035 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-11848 |
high | 7.9 | 0.0030 | 2026-06-12 | The iRM-IEI Remote Management developed by IEI Integration Corp has a Missing Authentication vulnera | |
CVE-2026-42976 |
high | 7.8 | 0.0030 | 2026-08-11 | Missing authentication for critical function in Windows RPC API allows an authorized attacker to ele | |
CVE-2026-61364 |
high | 7.8 | 0.0030 | 2026-08-11 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized | |
CVE-2026-61365 |
high | 7.8 | 0.0030 | 2026-08-11 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized | |
CVE-2026-50333 |
high | 7.8 | 0.0030 | 2026-07-14 | Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker | |
CVE-2026-61356 |
high | 7.8 | 0.0030 | 2026-08-11 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized | |
CVE-2026-61367 |
high | 7.8 | 0.0030 | 2026-08-11 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized | |
CVE-2026-62777 |
high | 7.8 | 0.0030 | 2026-08-11 | Missing authentication for critical function in Windows License Manager allows an authorized attacke | |
CVE-2026-83654 |
high | 7.8 | 0.0032 | 2026-10-13 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an aut | |
CVE-2026-85884 |
high | 7.8 | 0.0045 | 2026-10-13 | Missing authentication for critical function in Windows Health and Optimized Experiences Service all | 1 PoC |
CVE-2026-26159 |
high | 7.8 | 0.0026 | 2026-04-14 | Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an a | |
CVE-2026-26160 |
high | 7.8 | 0.0027 | 2026-04-14 | Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an a | |
CVE-2026-60600 |
high | 7.8 | 0.0018 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (compone | |
CVE-2026-59913 |
high | 7.8 | 0.0017 | 2026-08-03 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Auth | |
CVE-2026-76524 |
high | 7.8 | 0.0018 | 2026-10-21 | A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow | |
CVE-2026-34839 |
high | 7.7 | 0.0041 | 2026-04-21 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Glances | |
CVE-2026-24177 |
high | 7.7 | 0.0024 | 2026-04-21 | NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without a | |
CVE-2026-41273 |
high | 7.7 | 0.0031 | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3. | |
CVE-2026-60586 |
high | 7.7 | 0.0035 | 2026-07-21 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported v | |
CVE-2026-68578 |
high | 7.7 | 0.0036 | 2026-08-02 | ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, | |
CVE-2026-54317 |
high | 7.6 | 0.0031 | 2026-06-23 | Home Assistant is open source home automation software that puts local control and privacy first. Pr | |
CVE-2026-59804 |
high | 7.6 | 0.0031 | 2026-07-08 | Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication an | |
CVE-2026-114090 |
high | 7.6 | 0.0024 | 2026-10-21 | Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the tr | |
CVE-2026-83404 |
high | 7.5 | 0.0039 | 2026-10-20 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The s | |
CVE-2026-104189 |
high | 7.5 | 0.0035 | 2026-10-27 | The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that suppor | |
CVE-2026-105728 |
high | 7.5 | 0.0099 | 2026-10-13 | Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose inf | |
CVE-2026-40461 |
high | 7.5 | 0.0029 | 2026-04-17 | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings ( | |
CVE-2026-3323 |
high | 7.5 | 0.0040 | 2026-04-28 | An unsecured configuration interface on affected devices allows unauthenticated remote attackers to | |
CVE-2026-44413 |
high | 7.5 | 0.0027 | 2026-05-11 | In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unautho | |
CVE-2026-45088 |
high | 7.5 | 0.0031 | 2026-05-27 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, whe | |
CVE-2026-45332 |
high | 7.5 | 0.0142 | 2026-05-28 | Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 to 2.0.0-be | |
CVE-2026-35295 |
high | 7.5 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-46934 |
high | 7.5 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Su | |
CVE-2026-46935 |
high | 7.5 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Su | |
CVE-2026-46958 |
high | 7.5 | 0.0025 | 2026-06-17 | Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Inte | |
CVE-2026-46959 |
high | 7.5 | 0.0025 | 2026-06-17 | Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Inte | |
CVE-2026-46966 |
high | 7.5 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work | |
CVE-2026-54130 |
high | 7.5 | 0.0108 | 2026-06-18 | Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disc | |
CVE-2026-44025 |
high | 7.5 | 0.0047 | 2026-07-08 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS | |
CVE-2026-40006 |
high | 7.5 | 0.0058 | 2026-07-10 | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, M | |
CVE-2026-12691 |
high | 7.5 | 0.0052 | 2026-07-17 | Missing authentication for critical function vulnerability in Vimesoft Inc. Enterprise Video Platfor | |
CVE-2026-60263 |
high | 7.5 | 0.0041 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60495 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (co | |
CVE-2026-60496 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Ed |