Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-60329 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-60355 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-60362 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co | |
CVE-2026-60374 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60375 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60376 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60378 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60380 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60384 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60385 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60386 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60387 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60388 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60435 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60441 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60442 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60446 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-60460 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-60463 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-60535 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-60538 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Sch | |
CVE-2026-60551 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-60880 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal | |
CVE-2026-60999 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Ser | |
CVE-2026-61100 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-61129 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals). | |
CVE-2026-61131 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat | |
CVE-2026-61140 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-61145 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61154 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-61161 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61167 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su | |
CVE-2026-61178 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61183 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61196 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-61233 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (c | |
CVE-2026-61245 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (co | |
CVE-2026-60367 |
critical | 9.8 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-60372 |
critical | 9.8 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-14446 |
critical | 9.8 | 0.0053 | 2026-07-28 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escal | |
CVE-2026-14976 |
critical | 9.8 | 0.0061 | 2026-07-28 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code exec | |
CVE-2026-68502 |
critical | 9.8 | 0.0097 | 2026-07-30 | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.15 | |
CVE-2026-63455 |
critical | 9.8 | 0.0080 | 2026-08-04 | Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow | |
CVE-2026-71214 |
critical | 9.8 | 0.0048 | 2026-08-05 | The Aerie/PlanDev sequencing-server's authorization middleware (sequencing-server/src/app.ts) derive | |
CVE-2026-71289 |
critical | 9.8 | 0.0068 | 2026-08-05 | The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default dock | |
CVE-2026-61808 |
critical | 9.8 | 0.0250 | 2026-08-07 | LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRA | |
CVE-2026-72577 |
critical | 9.8 | 0.0127 | 2026-08-10 | Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker t | |
CVE-2026-72593 |
critical | 9.8 | 0.0079 | 2026-08-10 | A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated rem | |
CVE-2026-49819 |
critical | 9.8 | 0.0108 | 2026-08-13 | UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentica | |
CVE-2026-49827 |
critical | 9.8 | 0.0086 | 2026-08-13 | WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1 |