Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (879)
CWE-200 (847)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (540)
CWE-400 (528)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-60335 |
high | 7.2 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60396 |
high | 7.2 | 0.0049 | 2026-07-21 | Vulnerability in Oracle GoldenGate (component: Distribution Server executable). Supported versions | |
CVE-2026-60918 |
high | 7.2 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Intern | |
CVE-2026-60925 |
high | 7.2 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Int | |
CVE-2026-61285 |
high | 7.2 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (compon | |
CVE-2026-60883 |
high | 7.2 | 0.0049 | 2026-08-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Peop | |
CVE-2026-70861 |
high | 7.2 | 0.0046 | 2026-08-18 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (c | |
CVE-2026-91433 |
high | 7.2 | 0.0043 | 2026-10-20 | Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answ | |
CVE-2026-107858 |
high | 7.2 | 0.0036 | 2026-10-23 | Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted | |
CVE-2024-34268 |
high | 7.1 | 0.0032 | 2026-07-16 | EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was | |
CVE-2026-101450 |
high | 7.1 | 0.0030 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Inte | |
CVE-2025-30043 |
high | 7.1 | 0.0021 | 2026-10-23 | CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path | |
CVE-2026-50451 |
high | 7.1 | 0.0031 | 2026-07-14 | Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) all | |
CVE-2026-83715 |
high | 7.1 | 0.0033 | 2026-10-13 | Missing authentication for critical function in Windows Error Reporting allows an authorized attacke | |
CVE-2026-54040 |
high | 7.1 | 0.0026 | 2026-06-25 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the | |
CVE-2026-46555 |
high | 7.1 | 0.0021 | 2026-07-20 | WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read a | |
CVE-2026-60623 |
high | 7.1 | 0.0030 | 2026-07-21 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported v | |
CVE-2026-60908 |
high | 7.1 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite | |
CVE-2026-60781 |
high | 7.1 | 0.0030 | 2026-08-18 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmissio | |
CVE-2026-70806 |
high | 7.1 | 0.0014 | 2026-08-18 | Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-114636 |
high | 7.0 | 0.0024 | 2026-10-22 | Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX pro | |
CVE-2026-114357 |
high | 7.0 | 0.0031 | 2026-10-23 | Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI Crys | |
CVE-2026-97793 |
high | 7.0 | 0.0025 | 2026-10-13 | Missing authentication for critical function in Windows Setup and Deployment allows an authorized at | |
CVE-2026-96313 |
high | 7.0 | 0.0022 | 2026-10-13 | Missing authentication for critical function in Windows Push Notifications allows an authorized atta | |
CVE-2026-44949 |
high | 7.0 | 0.0039 | 2026-06-30 | A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handle | |
CVE-2026-46999 |
high | 7.0 | 0.0029 | 2026-07-21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-60705 |
high | 7.0 | 0.0029 | 2026-07-21 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-60902 |
high | 7.0 | 0.0013 | 2026-08-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxe | |
CVE-2026-114086 |
medium | 6.9 | 0.0038 | 2026-10-21 | Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams POS | |
CVE-2026-114261 |
medium | 6.9 | 0.0051 | 2026-10-21 | A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5 | |
CVE-2026-114439 |
medium | 6.9 | 0.0054 | 2026-10-21 | A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some | |
CVE-2025-30053 |
medium | 6.9 | 0.0035 | 2026-10-23 | The CGM CLININET application runs the cgm-updater process listening on an open network port without | |
CVE-2026-116817 |
medium | 6.9 | 0.0027 | 2026-10-27 | OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated a | |
CVE-2026-33366 |
medium | 6.9 | 0.0039 | 2026-03-27 | Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allo | |
CVE-2026-34999 |
medium | 6.9 | 0.0043 | 2026-04-01 | OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability in the bot | |
CVE-2026-32957 |
medium | 6.9 | 0.0027 | 2026-04-20 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for cri | |
CVE-2026-32962 |
medium | 6.9 | 0.0027 | 2026-04-20 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for cri | |
CVE-2026-45248 |
medium | 6.9 | 0.0036 | 2026-05-14 | Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/dem | |
CVE-2026-41047 |
medium | 6.9 | 0.0020 | 2026-06-22 | Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 all | |
CVE-2026-61344 |
medium | 6.9 | 0.0047 | 2026-07-09 | The Superior Court of California Hearing Reminder Service at https://www.hrs.courts.ca.gov exposes a | |
CVE-2026-57475 |
medium | 6.9 | 0.0060 | 2026-07-10 | Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API end | |
CVE-2026-15491 |
medium | 6.9 | 0.0065 | 2026-07-12 | A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3a | |
CVE-2026-63098 |
medium | 6.9 | 0.0045 | 2026-07-17 | TheHive through 4.1.24 contains an unauthenticated information disclosure vulnerability that allows | |
CVE-2026-66006 |
medium | 6.9 | 0.0056 | 2026-07-24 | lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in t | |
CVE-2026-17348 |
medium | 6.9 | 0.0042 | 2026-07-31 | In SERVER mode, pgAdmin 4 enforces authentication per route via the @pga_login_required decorator; t | |
CVE-2026-18810 |
medium | 6.9 | 0.0065 | 2026-08-04 | A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of | |
CVE-2026-72748 |
medium | 6.9 | 0.0119 | 2026-08-11 | AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json | |
CVE-2026-111653 |
medium | 6.9 | 0.0045 | 2026-10-16 | 53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated at | |
CVE-2026-112104 |
medium | 6.9 | 0.0063 | 2026-10-19 | A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknow | |
CVE-2026-111100 |
medium | 6.9 | 0.0039 | 2026-10-22 | The ONVIF device service on the E3 responds to certain informational requests without requiring auth |