Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-61247 |
medium | 4.8 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific | |
CVE-2026-71870 |
medium | 4.8 | 0.0013 | 2026-08-07 | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause la | |
CVE-2026-101365 |
medium | 4.7 | 0.0029 | 2026-10-20 | Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that a | |
CVE-2026-91244 |
medium | 4.7 | 0.0011 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported | |
CVE-2026-10668 |
medium | 4.6 | 0.0023 | 2026-07-12 | The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the co | |
CVE-2026-101497 |
medium | 4.3 | 0.0037 | 2026-10-20 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connect | |
CVE-2026-91294 |
medium | 4.3 | 0.0026 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Busines | |
CVE-2026-91660 |
medium | 4.3 | 0.0030 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-116774 |
medium | 4.3 | 0.0026 | 2026-10-27 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Fr | |
CVE-2026-42005 |
medium | 4.3 | 0.0063 | 2026-06-25 | An attacker can send a web request that causes unlimited memory allocation in the internal web serv | |
CVE-2026-60233 |
medium | 4.3 | 0.0037 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The s | |
CVE-2026-60303 |
medium | 4.3 | 0.0037 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60410 |
medium | 4.3 | 0.0037 | 2026-07-21 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (comp | |
CVE-2026-72912 |
medium | 4.3 | 0.0032 | 2026-08-10 | CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.3.0, Cy | |
CVE-2026-71486 |
medium | 4.3 | 0.0037 | 2026-08-17 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v1/completi | |
CVE-2026-91524 |
medium | 4.3 | 0.0026 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-61123 |
medium | 4.2 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operat | |
CVE-2026-60874 |
medium | 4.2 | 0.0025 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port | |
CVE-2026-101570 |
low | 3.7 | 0.0031 | 2026-10-20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2 | |
CVE-2026-44242 |
low | 3.7 | 0.0026 | 2026-05-12 | Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily t | |
CVE-2026-111766 |
low | 3.7 | 0.0043 | 2026-10-19 | markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark pre | |
CVE-2026-91409 |
low | 3.7 | 0.0038 | 2026-10-20 | Vulnerability in Oracle Java SE (component: Networking). The supported version that is affected is | |
CVE-2026-91582 |
low | 3.7 | 0.0025 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-108331 |
low | 3.3 | 0.0014 | 2026-10-27 | Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | |
CVE-2026-47022 |
low | 3.3 | 0.0015 | 2026-07-21 | Vulnerability in the GoldenGate Stream Analytics product of Oracle GoldenGate (component: Security). | |
CVE-2026-101415 |
low | 3.1 | 0.0027 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Anal | |
CVE-2026-60936 |
low | 3.1 | 0.0029 | 2026-07-21 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Intern | |
CVE-2026-61048 |
low | 3.1 | 0.0029 | 2026-07-21 | Vulnerability in the Oracle Inventory Optimization product of Oracle E-Business Suite (component: Us | |
CVE-2026-62508 |
low | 3.1 | 0.0029 | 2026-07-21 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-91400 |
low | 3.1 | 0.0026 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-55780 |
low | 2.4 | 0.0056 | 2026-07-10 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, Nan | |
CVE-2026-55781 |
low | 2.4 | 0.0016 | 2026-07-10 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, Nan | |
CVE-2026-55782 |
low | 2.4 | 0.0018 | 2026-07-10 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, Nan | |
CVE-2026-54786 |
low | 2.3 | 0.0037 | 2026-07-01 | Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those | |
CVE-2024-24769 |
low | 2.1 | 0.0028 | 2026-06-17 | vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, u | |
CVE-2026-5316 |
low | 2.1 | 0.0044 | 2026-04-02 | A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setu | |
CVE-2026-6601 |
low | 2.1 | 0.0028 | 2026-04-20 | A vulnerability has been found in Lagom WHMCS Template up to 2.4.2. This impacts an unknown function | |
CVE-2026-112157 |
low | 1.3 | 0.0030 | 2026-10-19 | A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted elemen | |
CVE-2026-20188 |
none | — | 0.0031 | 2026-05-06 | Following the initial publication of the Security Advisory about a denial of service (DoS) condition | |
CVE-2026-111073 |
— | — | 0.0020 | 2026-10-28 | The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics | |
CVE-2026-111108 |
— | — | 0.0027 | 2026-10-28 | Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count | |
CVE-2026-111551 |
— | — | 0.0022 | 2026-10-28 | Several Kafka deserialization paths read a size or count field from input data and use it directly t | |
CVE-2026-114349 |
— | — | 0.0023 | 2026-10-28 | When a broker decodes a compressed record batch, the per-record decoder reads a declared body size f | |
CVE-2021-44228 |
— | — | 1.0000 | — | Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlle | KEV |
CVE-2023-38180 |
— | — | 0.1413 | — | Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of | KEV |
CVE-2023-44487 |
— | — | 1.0000 | — | HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack ( | KEV |
CVE-2026-27858 |
— | — | 0.0080 | 2026-03-27 | Attacker can send a specifically crafted message before authentication that causes managesieve to al | |
CVE-2026-39304 |
— | — | 0.0090 | 2026-04-10 | Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, | |
CVE-2026-26171 |
— | — | 0.0175 | 2026-04-14 | Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a net | |
CVE-2026-34282 |
— | — | 0.0063 | 2026-04-21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ |