Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-23818 |
critical | 9.6 | 0.0032 | 2026-04-07 | A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Pr | |
CVE-2026-53662 |
critical | 9.6 | 0.0030 | 2026-06-23 | immich is a high performance self-hosted photo and video management solution. From commit 4ffa26c9 u | |
CVE-2026-61097 |
critical | 9.6 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle Banking Trade Finance Process Management product of Oracle Financial Ser | |
CVE-2026-70958 |
critical | 9.6 | 0.0042 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-61451 |
critical | 9.4 | 0.0031 | 2026-07-15 | The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-suppli | |
CVE-2026-41106 |
critical | 9.3 | 0.0072 | 2026-07-02 | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker | |
CVE-2026-33102 |
critical | 9.3 | 0.0040 | 2026-04-23 | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker | |
CVE-2026-60632 |
critical | 9.3 | 0.0038 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-8152 |
critical | 9.3 | 0.0041 | 2026-07-22 | Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site | |
CVE-2026-91296 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-35259 |
high | 8.8 | 0.0039 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp | |
CVE-2026-55237 |
high | 8.8 | 0.0023 | 2026-06-18 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificia | |
CVE-2026-47645 |
high | 8.8 | 0.0076 | 2026-06-19 | Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows | |
CVE-2026-60633 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60634 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60635 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60636 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60637 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60638 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60639 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60664 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-91579 |
high | 8.8 | 0.0022 | 2026-10-20 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Securit | |
CVE-2026-35258 |
high | 8.7 | 0.0031 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp | |
CVE-2026-61078 |
high | 8.7 | 0.0033 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSof | |
CVE-2026-54603 |
high | 8.6 | 0.0045 | 2026-07-28 | OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connec | |
CVE-2026-75833 |
high | 8.6 | 0.0022 | 2026-08-18 | The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack) before v | |
CVE-2026-35302 |
high | 8.3 | 0.0033 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp | |
CVE-2026-60640 |
high | 8.3 | 0.0017 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-64645 |
high | 8.3 | 0.0041 | 2026-07-27 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15 | |
CVE-2026-46806 |
high | 8.2 | 0.0032 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2023-25734 |
high | 8.1 | 0.0077 | 2023-06-02 | After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could | |
CVE-2026-40905 |
high | 8.1 | 0.0029 | 2026-04-21 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, a password reset poisonin | |
CVE-2026-44745 |
high | 8.1 | 0.0047 | 2026-07-14 | SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under | |
CVE-2026-46796 |
high | 8.0 | 0.0035 | 2026-06-17 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-46894 |
high | 8.0 | 0.0017 | 2026-06-17 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Home Pag | |
CVE-2026-60646 |
high | 8.0 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-60648 |
high | 8.0 | 0.0018 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-60650 |
high | 8.0 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-91328 |
high | 7.8 | 0.0012 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deploym | |
CVE-2026-91549 |
high | 7.8 | 0.0015 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-117553 |
high | 7.7 | 0.0050 | 2026-10-27 | Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows una | |
CVE-2026-60641 |
high | 7.6 | 0.0031 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60642 |
high | 7.6 | 0.0015 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-61181 |
high | 7.6 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-46955 |
high | 7.5 | 0.0016 | 2026-06-17 | Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). | |
CVE-2026-60467 |
high | 7.5 | 0.0033 | 2026-07-21 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-60658 |
high | 7.5 | 0.0016 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-10545 |
high | 7.5 | 0.0038 | 2026-07-30 | IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an a | |
CVE-2026-47026 |
high | 7.4 | 0.0037 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open | |
CVE-2026-32824 |
high | 7.3 | 0.0034 | 2026-07-20 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distr |