Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-60685 |
medium | 6.1 | 0.0013 | 2026-07-21 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operati | |
CVE-2026-60842 |
medium | 6.1 | 0.0013 | 2026-07-21 | Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Sear | |
CVE-2026-62444 |
medium | 6.1 | 0.0024 | 2026-07-21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int | |
CVE-2026-83589 |
medium | 6.1 | 0.0028 | 2026-10-01 | A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect | |
CVE-2026-81509 |
medium | 6.1 | 0.0032 | 2026-10-26 | nforwardauth is a forward auth service that allows the use of a single authentication middleware for | |
CVE-2026-10562 |
medium | 5.9 | 0.0046 | 2026-06-30 | An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due to improp | |
CVE-2026-55806 |
medium | 5.9 | 0.0034 | 2026-07-10 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Conte | |
CVE-2026-66773 |
medium | 5.9 | 0.0031 | 2026-08-11 | A malicious or compromised OData service could disclose sensitive authentication information and inj | |
CVE-2026-101403 |
medium | 5.9 | 0.0025 | 2026-10-20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketin | |
CVE-2026-75628 |
medium | 5.7 | 0.0050 | 2026-08-20 | Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login be | |
CVE-2026-44520 |
medium | 5.7 | 0.0019 | 2026-05-14 | Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge grap | |
CVE-2024-4989 |
medium | 5.4 | 0.0017 | 2026-10-21 | The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to | |
CVE-2026-83646 |
medium | 5.4 | 0.0042 | 2026-10-13 | Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) | |
CVE-2026-45335 |
medium | 5.4 | 0.0018 | 2026-05-27 | WeGIA is a web manager for charitable institutions. Prior to 3.7.3, an Open Redirect vulnerability w | |
CVE-2026-47048 |
medium | 5.4 | 0.0021 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Secu | |
CVE-2026-47051 |
medium | 5.4 | 0.0021 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Secu | |
CVE-2026-60911 |
medium | 5.4 | 0.0012 | 2026-07-21 | Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal | |
CVE-2026-60957 |
medium | 5.4 | 0.0012 | 2026-07-21 | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: | |
CVE-2026-61254 |
medium | 5.4 | 0.0024 | 2026-07-21 | Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: | |
CVE-2026-62563 |
medium | 5.4 | 0.0012 | 2026-07-21 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal | |
CVE-2026-18266 |
medium | 5.4 | 0.0029 | 2026-07-29 | Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability. This vulnerability allows remote at | |
CVE-2026-14219 |
medium | 5.4 | 0.0021 | 2026-08-04 | URL redirection to untrusted site ('open redirect') vulnerability in Bilin Software and Informatics | |
CVE-2026-91455 |
medium | 5.4 | 0.0023 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev | |
CVE-2026-87945 |
medium | 5.4 | 0.0022 | 2026-10-22 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provi | |
CVE-2026-115196 |
medium | 5.4 | 0.0032 | 2026-10-26 | An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mauti | |
CVE-2026-97165 |
medium | 5.3 | 0.0014 | 2026-09-27 | Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5. | |
CVE-2026-39940 |
medium | 5.3 | 0.0027 | 2026-04-13 | ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in many places | |
CVE-2026-3318 |
medium | 5.3 | 0.0034 | 2026-05-08 | Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform. The vuln | |
CVE-2026-44372 |
medium | 5.3 | 0.0028 | 2026-05-13 | Nitro is a next generation server toolkit. Prior to 3.0.260429-beta, an attacker could turn a redire | |
CVE-2026-12049 |
medium | 5.3 | 0.0038 | 2026-06-19 | Open redirect in pgAdmin 4's multi-factor authentication flow. The MFA validate and register endpoin | |
CVE-2026-12622 |
medium | 5.3 | 0.0021 | 2026-06-19 | The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form su | |
CVE-2026-56326 |
medium | 5.3 | 0.0036 | 2026-06-22 | Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 contain a server-side open redirect vulnerabi | |
CVE-2026-13163 |
medium | 5.3 | 0.0051 | 2026-06-24 | Open redirect vulnerability (CWE-601) in the _safe_redirect function of the click-tracking endpoint | |
CVE-2026-58450 |
medium | 5.3 | 0.0029 | 2026-06-30 | Invoice Ninja through 5.13.26 contains an open redirect vulnerability in the client portal login tha | |
CVE-2026-63768 |
medium | 5.3 | 0.0034 | 2026-07-20 | cal.diy through 6.2.0 contains an open redirect vulnerability in the conferencing OAuth callback end | |
CVE-2026-16336 |
medium | 5.3 | 0.0045 | 2026-07-21 | A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/tri | |
CVE-2026-62517 |
medium | 5.3 | 0.0016 | 2026-07-21 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Int | |
CVE-2026-12071 |
medium | 5.3 | 0.0046 | 2026-08-07 | The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, | |
CVE-2026-54214 |
medium | 5.3 | 0.0046 | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through | |
CVE-2026-54215 |
medium | 5.3 | 0.0046 | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl | |
CVE-2026-77028 |
medium | 5.3 | 0.0041 | 2026-08-21 | Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parame | |
CVE-2026-115360 |
medium | 5.3 | 0.0025 | 2026-10-22 | OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that | |
CVE-2024-58389 |
medium | 5.1 | 0.0028 | 2026-10-12 | HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that | |
CVE-2026-41226 |
medium | 5.1 | 0.0030 | 2026-04-30 | Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Ima | |
CVE-2026-12863 |
medium | 5.1 | 0.0035 | 2026-06-22 | An unvalidated redirect was contained in Venueless' social login functionality and could be exploite | |
CVE-2026-55590 |
medium | 5.1 | 0.0049 | 2026-07-09 | CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based | |
CVE-2026-53669 |
medium | 5.1 | 0.0032 | 2026-07-27 | React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect t | |
CVE-2026-59806 |
medium | 4.9 | 0.0044 | 2026-07-08 | Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that al | |
CVE-2026-21741 |
medium | 4.8 | 0.0021 | 2026-04-14 | An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fort | |
CVE-2026-41513 |
medium | 4.8 | 0.0034 | 2026-05-12 | Horilla is an HR and CRM software. In 1.5.0, the notification endpoints trust the unvalidated next p |