Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-116070 |
medium | 6.9 | 0.0054 | 2026-10-25 | Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/co | |
CVE-2026-116257 |
medium | 6.9 | 0.0063 | 2026-10-26 | A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function | |
CVE-2026-6511 |
medium | 6.8 | 0.0013 | 2026-07-16 | During an internal security assessment, a potential improper access control vulnerability was discov | |
CVE-2026-5944 |
medium | 6.7 | 0.0053 | 2026-04-28 | An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix | |
CVE-2026-42176 |
medium | 6.7 | 0.0031 | 2026-05-08 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.67.0, Scoold allows t | |
CVE-2026-4522 |
medium | 6.7 | 0.0018 | 2026-06-25 | Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Cr | |
CVE-2026-61176 |
medium | 6.7 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: I | |
CVE-2026-101488 |
medium | 6.5 | 0.0036 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi | |
CVE-2026-87342 |
medium | 6.5 | 0.0027 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Secu | |
CVE-2026-87344 |
medium | 6.5 | 0.0026 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP | |
CVE-2026-91274 |
medium | 6.5 | 0.0026 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitor | |
CVE-2026-34266 |
medium | 6.5 | 0.0037 | 2026-04-21 | Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (comp | |
CVE-2026-34280 |
medium | 6.5 | 0.0037 | 2026-04-21 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (compone | |
CVE-2026-41899 |
medium | 6.5 | 0.0036 | 2026-07-06 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-46997 |
medium | 6.5 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-60322 |
medium | 6.5 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Orac | |
CVE-2026-60557 |
medium | 6.5 | 0.0037 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-60616 |
medium | 6.5 | 0.0028 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (compone | |
CVE-2026-60712 |
medium | 6.5 | 0.0015 | 2026-07-21 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-72541 |
medium | 6.5 | 0.0030 | 2026-08-11 | A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows any authentic | |
CVE-2026-73245 |
medium | 6.5 | 0.0033 | 2026-08-11 | Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/ | |
CVE-2026-52480 |
medium | 6.5 | 0.0033 | 2026-08-18 | An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensiti | |
CVE-2026-60682 |
medium | 6.5 | 0.0027 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repo | |
CVE-2026-91430 |
medium | 6.5 | 0.0022 | 2026-10-20 | Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Finan | |
CVE-2026-55463 |
medium | 6.5 | 0.0014 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-24259 |
medium | 6.4 | 0.0018 | 2026-07-14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authent | |
CVE-2026-29132 |
medium | 6.3 | 0.0025 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GIN | |
CVE-2026-6736 |
medium | 6.3 | 0.0027 | 2026-05-07 | An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an un | |
CVE-2026-15044 |
medium | 6.3 | 0.0021 | 2026-07-08 | A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardra | |
CVE-2026-15063 |
medium | 6.3 | 0.0028 | 2026-07-08 | A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even | |
CVE-2026-57476 |
medium | 6.3 | 0.0044 | 2026-07-10 | Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with | |
CVE-2026-60574 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Cover Let | |
CVE-2026-62474 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (compone | |
CVE-2026-65014 |
medium | 6.3 | 0.0059 | 2026-07-22 | n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/tes | |
CVE-2026-65012 |
medium | 6.3 | 0.0044 | 2026-07-22 | InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /a | |
CVE-2026-70693 |
medium | 6.3 | 0.0014 | 2026-08-18 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-101430 |
medium | 6.2 | 0.0017 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test | |
CVE-2026-88941 |
medium | 6.2 | 0.0014 | 2026-10-29 | Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Ce | |
CVE-2026-87345 |
medium | 6.1 | 0.0023 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi | |
CVE-2026-49174 |
medium | 6.1 | 0.0027 | 2026-07-14 | Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker | |
CVE-2026-42303 |
medium | 6.1 | 0.0031 | 2026-05-12 | Fides is an open-source privacy engineering platform. From 2.75.0 to before 2.83.2, Fides deployment | |
CVE-2026-30799 |
medium | 6.1 | 0.0026 | 2026-06-17 | Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plu | |
CVE-2026-101490 |
medium | 6.1 | 0.0024 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Flui | |
CVE-2026-104381 |
medium | 6.0 | 0.0013 | 2026-10-27 | A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature al | |
CVE-2026-2675 |
medium | 6.0 | 0.0021 | 2026-06-17 | Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plu | |
CVE-2026-12527 |
medium | 6.0 | 0.0022 | 2026-06-18 | A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communicati | |
CVE-2026-9033 |
medium | 6.0 | 0.0028 | 2026-08-20 | An unauthenticated attacker with network access to the captive portal service of an affected device | |
CVE-2026-91282 |
medium | 5.9 | 0.0030 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Portal | |
CVE-2026-34288 |
medium | 5.9 | 0.0026 | 2026-04-21 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-34289 |
medium | 5.9 | 0.0026 | 2026-04-21 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen |