Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-112955 |
medium | 6.5 | 0.0053 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-expo | |
CVE-2026-91435 |
medium | 6.5 | 0.0039 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-91479 |
medium | 6.5 | 0.0024 | 2026-10-20 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte | |
CVE-2026-60620 |
medium | 6.4 | 0.0025 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: | |
CVE-2026-50193 |
medium | 6.3 | 0.0062 | 2026-06-23 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson | |
CVE-2026-55407 |
medium | 6.3 | 0.0076 | 2026-07-16 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Pri | |
CVE-2026-116120 |
medium | 6.3 | 0.0028 | 2026-10-26 | A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function Us | |
CVE-2026-118773 |
medium | 6.3 | — | 2026-10-29 | Glob matches files using patterns the shell uses. From 9.0.0 until 14.0.2, abort branches in src/wal | |
CVE-2026-67312 |
medium | 6.3 | 0.0052 | 2026-08-01 | axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion | |
CVE-2026-86420 |
medium | 6.3 | 0.0032 | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operatio | |
CVE-2026-86421 |
medium | 6.3 | 0.0045 | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted | |
CVE-2026-43653 |
medium | 6.2 | 0.0019 | 2026-05-11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS | |
CVE-2026-34673 |
medium | 6.2 | 0.0020 | 2026-05-12 | CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontr | |
CVE-2026-34677 |
medium | 6.2 | 0.0019 | 2026-05-12 | CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontr | |
CVE-2026-34678 |
medium | 6.2 | 0.0025 | 2026-05-12 | CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontr | |
CVE-2026-61147 |
medium | 6.2 | 0.0017 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-63119 |
medium | 6.2 | 0.0019 | 2026-07-29 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23. | |
CVE-2026-58045 |
medium | 6.2 | 0.0017 | 2026-08-04 | A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the | |
CVE-2026-101471 |
medium | 6.1 | 0.0014 | 2026-10-20 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: I | |
CVE-2026-113789 |
medium | 6.0 | 0.0039 | 2026-10-21 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PD | |
CVE-2026-113790 |
medium | 6.0 | 0.0039 | 2026-10-21 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PD | |
CVE-2026-22003 |
medium | 6.0 | 0.0010 | 2026-04-21 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co | |
CVE-2026-45802 |
medium | 6.0 | 0.0026 | 2026-06-11 | FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and us | |
CVE-2026-47041 |
medium | 6.0 | 0.0016 | 2026-07-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-71128 |
medium | 6.0 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-113791 |
medium | 6.0 | 0.0039 | 2026-10-21 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PD | |
CVE-2026-113795 |
medium | 6.0 | 0.0047 | 2026-10-21 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF st | |
CVE-2026-67414 |
medium | 6.0 | 0.0054 | 2026-10-14 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, de | |
CVE-2026-101389 |
medium | 5.9 | 0.0040 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi | |
CVE-2026-101474 |
medium | 5.9 | 0.0031 | 2026-10-20 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-91247 |
medium | 5.9 | 0.0026 | 2026-10-20 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime | |
CVE-2023-28320 |
medium | 5.9 | 0.0266 | 2023-05-26 | A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several differe | |
CVE-2026-60669 |
medium | 5.9 | 0.0027 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Mexico product of Oracle PeopleSoft (c | |
CVE-2026-58042 |
medium | 5.9 | 0.0037 | 2026-08-04 | A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains | |
CVE-2026-49343 |
medium | 5.9 | 0.0041 | 2026-08-07 | Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, t | |
CVE-2026-91421 |
medium | 5.9 | 0.0037 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-101412 |
medium | 5.8 | 0.0012 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Anal | |
CVE-2026-101524 |
medium | 5.6 | 0.0019 | 2026-10-20 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-101407 |
medium | 5.5 | 0.0041 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Upda | |
CVE-2025-59529 |
medium | 5.5 | 0.0022 | 2025-12-18 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protoco | |
CVE-2026-5986 |
medium | 5.5 | 0.0037 | 2026-04-09 | A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1. The impacted element is the func | |
CVE-2026-6607 |
medium | 5.5 | 0.0062 | 2026-04-20 | A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the f | |
CVE-2026-6844 |
medium | 5.5 | 0.0010 | 2026-04-22 | A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit tw | |
CVE-2026-8319 |
medium | 5.5 | 0.0038 | 2026-05-11 | A weakness has been identified in aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c97090cc15f59. | |
CVE-2026-47044 |
medium | 5.5 | 0.0015 | 2026-07-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-61052 |
medium | 5.5 | 0.0015 | 2026-07-21 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The suppor | |
CVE-2026-28932 |
medium | 5.5 | 0.0016 | 2026-07-27 | A logic issue existed resulting in memory corruption. This was addressed with improved state managem | |
CVE-2026-43768 |
medium | 5.5 | 0.0016 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-43806 |
medium | 5.5 | 0.0014 | 2026-07-27 | A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macO | |
CVE-2026-10695 |
medium | 5.5 | 0.0014 | 2026-07-30 | IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non |