Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-66139 |
medium | 4.8 | 0.0048 | 2026-07-24 | OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is | |
CVE-2026-116228 |
medium | 4.8 | 0.0014 | 2026-10-26 | A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function | |
CVE-2026-83656 |
medium | 4.7 | 0.0027 | 2026-10-13 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an aut | |
CVE-2026-112949 |
medium | 4.7 | 0.0034 | 2026-10-20 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 | |
CVE-2026-60884 |
medium | 4.4 | 0.0017 | 2026-08-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Pane | |
CVE-2026-13306 |
medium | 4.3 | 0.0027 | 2026-07-29 | Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerability allows p | |
CVE-2026-47122 |
medium | 4.2 | 0.0010 | 2026-07-21 | Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, `Autoupdate | |
CVE-2026-42095 |
medium | 4.0 | 0.0016 | 2026-04-24 | bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by | |
CVE-2026-87340 |
low | 3.7 | 0.0024 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port | |
CVE-2026-21767 |
low | 3.3 | 0.0012 | 2026-04-02 | HCL BigFix Platform is affected by insufficient authentication. The application might allow users t | |
CVE-2026-113648 |
low | 3.1 | 0.0033 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-expo | |
CVE-2026-7113 |
low | 2.9 | 0.0036 | 2026-04-27 | A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown | |
CVE-2026-47038 |
low | 2.7 | 0.0029 | 2026-07-21 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte | |
CVE-2026-60596 |
low | 2.3 | 0.0016 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: | |
CVE-2026-109571 |
low | 2.3 | 0.0018 | 2026-10-12 | Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability | |
CVE-2026-16015 |
low | 2.1 | 0.0058 | 2026-07-17 | A vulnerability was determined in poco-ai poco-claw up to 0.5.4. This vulnerability affects the func | |
CVE-2017-10271 |
— | — | 0.9999 | — | Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution. | KEV |
CVE-2019-5591 |
— | — | 0.1857 | — | Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated at | KEV |
CVE-2023-28461 |
— | — | 0.6808 | — | Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerabil | KEV |
CVE-2024-51567 |
— | — | 0.8440 | — | CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthentic | KEV |
CVE-2024-0012 |
— | — | 0.9979 | — | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based managemen | KEV |
CVE-2024-11680 |
— | — | 0.9185 | — | ProjectSend contains an improper authentication vulnerability that allows a remote, unauthenticated | KEV |
CVE-2025-0108 |
— | — | 0.9814 | — | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web inte | KEV |
CVE-2025-3248 |
— | — | 0.9999 | — | Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that | KEV |
CVE-2025-61757 |
— | — | 0.8865 | — | Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allo | KEV |
CVE-2025-48572 |
— | — | 0.0026 | — | Android Framework contains an unspecified vulnerability that allows for privilege escalation. | KEV |
CVE-2026-24423 |
— | — | 0.8818 | — | SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in th | KEV |
CVE-2026-46817 |
— | — | 0.1231 | — | Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unaut | KEV |
CVE-2026-20253 |
— | — | 0.9694 | — | Splunk Enterprise contains a missing authentication for critical function vulnerability which could | KEV |
CVE-2026-35273 |
— | — | 0.9668 | — | Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vul | KEV |
CVE-2026-72529 |
— | — | 0.0146 | — | TrueConf Server contains a missing authentication for critical function vulnerability which could al | KEV |
CVE-2026-67277 |
— | — | 0.0156 | — | MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows | KEV |
CVE-2026-59562 |
— | — | 0.0028 | 2026-10-21 | Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Ap | |
CVE-2026-78334 |
— | — | 0.0026 | 2026-10-21 | Missing authentication in the streaming RPC path of Apache bRPC (version < 1.18.0) on all platforms |