Weaknesses of type CWE-284

4,434 results
CVE-2026-48930MEDIUMA flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation iEPSS 0.4%CVE-2025-59201HIGHNetwork Connection Status Indicator (NCSI) Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2024-42354MEDIUMShopware vulnerable to Improper Access Control with ManyToMany associations in store-apiEPSS 0.4%CVE-2025-30700LOWVulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). The supported version that is EPSS 0.4%CVE-2025-7477MEDIUMcode-projects Simple Car Rental System add_cars.php unrestricted uploadEPSS 0.4%CVE-2025-0463MEDIUMShanghai Lingdang Information Technology Lingdang CRM index.php unrestricted uploadEPSS 0.4%CVE-2025-0226MEDIUMTsinghua Unigroup Electronic Archives System downLoad.html download information disclosureEPSS 0.4%CVE-2023-47867HIGHMachineSense FeverWarn Improper Access ControlEPSS 0.4%CVE-2025-6266MEDIUMTeledyne FLIR AX8 upload.php unrestricted uploadEPSS 0.4%CVE-2020-8028CRITICALsalt-api is accessible to every user on SUSE Manager ServerEPSS 0.4%CVE-2026-46886HIGHVulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are EPSS 0.4%CVE-2026-46921HIGHVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that EPSS 0.4%CVE-2026-35311HIGHVulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1EPSS 0.4%CVE-2026-35315HIGHVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are EPSS 0.4%CVE-2026-46793CRITICALVulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Database User). Supported versions that areEPSS 0.4%CVE-2026-35280CRITICALVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versionsEPSS 0.4%CVE-2026-35322HIGHVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are EPSS 0.4%CVE-2026-12203MEDIUMHKUDS AI-Trader Research Export agents.csv information disclosureEPSS 0.4%CVE-2026-46940HIGHVulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affeEPSS 0.4%CVE-2026-46779CRITICALVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versionsEPSS 0.4%