Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1098)
CWE-22 (1025)
CWE-125 (884)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (688)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-60647 |
high | 7.1 | 0.0038 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-61165 |
high | 7.1 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-69244 |
high | 7.1 | 0.0053 | 2026-08-03 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an | |
CVE-2026-109294 |
high | 7.1 | 0.0031 | 2026-10-12 | Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability tha | |
CVE-2026-109297 |
high | 7.1 | 0.0037 | 2026-10-12 | Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurre | |
CVE-2026-109298 |
high | 7.1 | 0.0047 | 2026-10-12 | Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file s | |
CVE-2026-109299 |
high | 7.1 | 0.0038 | 2026-10-12 | Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authentic | |
CVE-2026-110832 |
high | 7.1 | 0.0031 | 2026-10-14 | FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data | |
CVE-2026-115572 |
high | 7.1 | 0.0037 | 2026-10-23 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PD | |
CVE-2026-115585 |
high | 7.1 | 0.0041 | 2026-10-23 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete remediation | |
CVE-2026-119208 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessiv | |
CVE-2026-119209 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessiv | |
CVE-2026-119204 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consume excessiv | |
CVE-2026-119206 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive t | |
CVE-2026-119207 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessiv | |
CVE-2026-101583 |
high | 7.0 | 0.0023 | 2026-10-20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper). | |
CVE-2026-114103 |
medium | 6.9 | 0.0040 | 2026-10-21 | adm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the max | |
CVE-2026-115388 |
medium | 6.9 | 0.0011 | 2026-10-22 | wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does n | |
CVE-2026-70380 |
medium | 6.9 | 0.0031 | 2026-10-26 | A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection | |
CVE-2026-117503 |
medium | 6.9 | 0.0071 | 2026-10-27 | A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of | |
CVE-2026-118275 |
medium | 6.9 | 0.0043 | 2026-10-28 | A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.r | |
CVE-2026-118589 |
medium | 6.9 | 0.0040 | 2026-10-29 | A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the | |
CVE-2026-118590 |
medium | 6.9 | 0.0042 | 2026-10-29 | A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the | |
CVE-2026-22815 |
medium | 6.9 | 0.0046 | 2026-04-01 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.1 | |
CVE-2026-32686 |
medium | 6.9 | 0.0048 | 2026-05-07 | Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Deni | |
CVE-2026-49461 |
medium | 6.9 | 0.0017 | 2026-06-22 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this | |
CVE-2026-57204 |
medium | 6.9 | 0.0037 | 2026-06-30 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously crafted PDF | |
CVE-2026-59937 |
medium | 6.9 | 0.0062 | 2026-07-08 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PD | |
CVE-2026-33444 |
medium | 6.9 | 0.0035 | 2026-07-15 | CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attacke | |
CVE-2026-55398 |
medium | 6.9 | 0.0035 | 2026-07-15 | CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14 | |
CVE-2026-61387 |
medium | 6.9 | 0.0062 | 2026-08-04 | In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: | |
CVE-2026-111817 |
medium | 6.9 | 0.0036 | 2026-10-21 | Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed | |
CVE-2026-115390 |
medium | 6.9 | 0.0024 | 2026-10-22 | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift- | |
CVE-2026-116141 |
medium | 6.9 | 0.0033 | 2026-10-25 | ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows a | |
CVE-2026-119284 |
medium | 6.9 | — | 2026-10-29 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encry | |
CVE-2026-40951 |
medium | 6.8 | 0.0009 | 2026-04-30 | CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50 | |
CVE-2026-60846 |
medium | 6.7 | 0.0040 | 2026-07-21 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: | |
CVE-2026-34277 |
medium | 6.6 | 0.0022 | 2026-04-21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Flui | |
CVE-2026-45822 |
medium | 6.6 | 0.0051 | 2026-06-30 | decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits | |
CVE-2026-62465 |
medium | 6.6 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operat | |
CVE-2026-45820 |
medium | 6.6 | 0.0028 | 2026-07-22 | fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A craft | |
CVE-2023-27270 |
medium | 6.5 | 0.0061 | 2023-03-14 | SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, | |
CVE-2025-60790 |
medium | 6.5 | 0.0043 | 2025-10-21 | ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Langu | |
CVE-2026-101488 |
medium | 6.5 | 0.0036 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi | |
CVE-2026-101575 |
medium | 6.5 | 0.0019 | 2026-10-20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versio | |
CVE-2026-101584 |
medium | 6.5 | 0.0027 | 2026-10-20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-webso | |
CVE-2026-91284 |
medium | 6.5 | 0.0029 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev | |
CVE-2026-96636 |
medium | 6.5 | 0.0034 | 2026-10-21 | Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() rep | |
CVE-2026-96638 |
medium | 6.5 | 0.0034 | 2026-10-21 | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpIm | |
CVE-2026-114610 |
medium | 6.5 | 0.0046 | 2026-10-22 | fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.build_xref() p |