Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9499 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-93030 1 Ibm 1 Financial Transaction Manager (ftm) for Redhat Openshift 2026-09-26 6.5 Medium
FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw.
CVE-2026-16672 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-26 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-16468 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-25 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection.
CVE-2026-16469 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-25 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-17102 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-25 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-11538 1 Ibm 1 Websphere Application Server 2026-09-24 3.7 Low
IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies.
CVE-2026-77874 1 Ibm 1 Enterprise Build Of Quarkus 2026-09-24 8.6 High
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
CVE-2026-15064 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-09-23 8.7 High
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.
CVE-2026-14981 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-09-23 7.5 High
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits.
CVE-2026-15328 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-09-23 7.4 High
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling.
CVE-2026-12751 1 Ibm 1 Cloud Pak For Business Automation 2026-09-23 5.4 Medium
IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
CVE-2026-12750 1 Ibm 1 Cloud Pak For Business Automation 2026-09-23 6.4 Medium
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2026-12749 1 Ibm 1 Cloud Pak For Business Automation 2026-09-23 6.4 Medium
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2026-4921 1 Ibm 1 Guardium Data Protection 2026-09-23 2.7 Low
IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
CVE-2026-15915 1 Ibm 1 Concert 2026-09-23 6.2 Medium
IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images.
CVE-2026-10027 1 Ibm 1 Mq 2026-09-23 8.1 High
IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configured with compression enabled.
CVE-2026-10575 1 Ibm 1 Mq 2026-09-23 8.8 High
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.
CVE-2026-10853 1 Ibm 1 Mq 2026-09-23 7.5 High
IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths.
CVE-2026-11375 1 Ibm 1 Mq 2026-09-23 8.8 High
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.
CVE-2026-11378 1 Ibm 1 Mq 2026-09-23 8.8 High
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing.