Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-60497 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component | |
CVE-2026-60498 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edward | |
CVE-2026-60604 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (compone | |
CVE-2026-60605 |
high | 7.5 | 0.0041 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (componen | |
CVE-2026-60619 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component | |
CVE-2026-60689 |
high | 7.5 | 0.0041 | 2026-07-21 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-60704 |
high | 7.5 | 0.0041 | 2026-07-21 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-60855 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-60859 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-60894 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-60927 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: | |
CVE-2026-60931 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: | |
CVE-2026-60988 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component | |
CVE-2026-61141 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Afforda | |
CVE-2026-61158 |
high | 7.5 | 0.0041 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61188 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-62493 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Opera | |
CVE-2026-5057 |
high | 7.5 | 0.0074 | 2026-07-29 | ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability. This vulnerability a | |
CVE-2026-28814 |
high | 7.5 | 0.0066 | 2026-07-30 | Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows | |
CVE-2026-71241 |
high | 7.5 | 0.0049 | 2026-08-05 | Book-Management-System's Flask API endpoints /student, /record, /books, /find_stu_book, and /find_no | |
CVE-2026-61891 |
high | 7.5 | 0.0053 | 2026-08-05 | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP f | |
CVE-2026-48911 |
high | 7.5 | 0.0057 | 2026-08-05 | Insufficient Verification of Data Authenticity vulnerability in Apache Answer. This issue affects A | |
CVE-2026-8446 |
high | 7.5 | 0.0049 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Co | |
CVE-2026-55814 |
high | 7.5 | 0.0066 | 2026-08-10 | Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to | |
CVE-2026-72586 |
high | 7.5 | 0.0063 | 2026-08-10 | A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated re | |
CVE-2026-72688 |
high | 7.5 | 0.0061 | 2026-08-10 | A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unaut | |
CVE-2026-72605 |
high | 7.5 | 0.0054 | 2026-08-11 | A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers | |
CVE-2026-73246 |
high | 7.5 | 0.0060 | 2026-08-11 | Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/s | |
CVE-2026-60765 |
high | 7.5 | 0.0018 | 2026-08-18 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S | |
CVE-2026-60769 |
high | 7.5 | 0.0033 | 2026-08-18 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-60975 |
high | 7.5 | 0.0013 | 2026-08-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Secu | |
CVE-2026-70930 |
high | 7.5 | 0.0033 | 2026-08-18 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product | |
CVE-2026-70973 |
high | 7.5 | 0.0033 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-49217 |
high | 7.5 | 0.0036 | 2026-08-20 | Mailu is a mail server as a set of Docker images. Prior to version 2024.06.52, a missing authorizati | |
CVE-2026-91515 |
high | 7.5 | 0.0024 | 2026-10-20 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-114123 |
high | 7.5 | 0.0042 | 2026-10-21 | D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operation | |
CVE-2026-57146 |
high | 7.5 | 0.0034 | 2026-10-23 | PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the publishe | |
CVE-2026-101421 |
high | 7.5 | 0.0040 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) | |
CVE-2026-87314 |
high | 7.4 | 0.0030 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interop | |
CVE-2026-44460 |
high | 7.4 | 0.0033 | 2026-05-27 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operatio | |
CVE-2026-61135 |
high | 7.4 | 0.0034 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat | |
CVE-2026-91449 |
high | 7.4 | 0.0024 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91450 |
high | 7.4 | 0.0030 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-61571 |
high | 7.3 | 0.0028 | 2026-10-28 | AVideo is a video-sharing Platform. Prior to 8.1.0, the encoder lacks a global authentication layer | |
CVE-2026-24229 |
high | 7.3 | 0.0016 | 2026-07-14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, | |
CVE-2026-55626 |
high | 7.3 | 0.0019 | 2026-07-20 | xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session | |
CVE-2026-61267 |
high | 7.3 | 0.0031 | 2026-07-21 | Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (componen | |
CVE-2026-25703 |
high | 7.3 | 0.0080 | 2026-08-05 | NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to m | |
CVE-2026-91502 |
high | 7.3 | 0.0029 | 2026-10-20 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-46922 |
high | 7.2 | 0.0045 | 2026-06-17 | Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal |