Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-61149 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61168 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su | |
CVE-2026-61179 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61180 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61243 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft | |
CVE-2026-61311 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Oper | |
CVE-2026-61320 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operati | |
CVE-2026-61322 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the TeleSales product of Oracle E-Business Suite (component: Internal Operations). | |
CVE-2026-62447 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LO | |
CVE-2026-62464 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-62476 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Int | |
CVE-2026-62478 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: | |
CVE-2026-62496 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal | |
CVE-2026-62498 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Intern | |
CVE-2026-62534 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: We | |
CVE-2026-60373 |
high | 8.8 | 0.0047 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-60439 |
high | 8.8 | 0.0047 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-61246 |
high | 8.8 | 0.0047 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-7187 |
high | 8.8 | 0.0037 | 2026-07-28 | Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Ac | |
CVE-2026-16771 |
high | 8.8 | 0.0043 | 2026-07-28 | In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑sid | |
CVE-2026-54367 |
high | 8.8 | 0.0032 | 2026-07-30 | CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated | |
CVE-2026-60009 |
high | 8.8 | 0.0044 | 2026-08-05 | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST /f | |
CVE-2026-53984 |
high | 8.8 | 0.0073 | 2026-08-06 | Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-in | |
CVE-2026-73222 |
high | 8.8 | 0.0032 | 2026-08-11 | Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the | |
CVE-2026-19426 |
high | 8.8 | 0.0052 | 2026-08-12 | POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote a | |
CVE-2026-65941 |
high | 8.8 | 0.0068 | 2026-08-12 | In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network a | |
CVE-2026-60716 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-60722 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-60731 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose | |
CVE-2026-60751 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S | |
CVE-2026-60879 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Conf | |
CVE-2026-60967 |
high | 8.8 | 0.0042 | 2026-08-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVis | |
CVE-2026-70918 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data | |
CVE-2026-70940 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70956 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-71067 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX | |
CVE-2026-91407 |
high | 8.8 | 0.0042 | 2026-10-20 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST We | |
CVE-2026-91442 |
high | 8.8 | 0.0029 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91521 |
high | 8.8 | 0.0029 | 2026-10-20 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-91532 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Inte | |
CVE-2026-91535 |
high | 8.8 | 0.0029 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-103090 |
high | 8.8 | 0.0034 | 2026-10-21 | Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE | |
CVE-2026-114126 |
high | 8.7 | 0.0053 | 2026-10-21 | Storybook is a frontend workshop for building user interface components and pages in isolation. From | |
CVE-2026-106087 |
high | 8.7 | 0.0025 | 2026-10-27 | TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this v | |
CVE-2026-5777 |
high | 8.7 | 0.0026 | 2026-04-10 | This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bri | |
CVE-2026-41039 |
high | 8.7 | 0.0026 | 2026-04-21 | This vulnerability exists in Quantum Networks router due to improper access control and insecure def | |
CVE-2026-6376 |
high | 8.7 | 0.0050 | 2026-04-23 | A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be | |
CVE-2026-35064 |
high | 8.7 | 0.0046 | 2026-04-24 | A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deploy | |
CVE-2026-42856 |
high | 8.7 | 0.0055 | 2026-05-11 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to 5.1.3, the MCP HTTP transport | |
CVE-2026-44830 |
high | 8.7 | 0.0022 | 2026-05-27 | Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. P |