Export limit exceeded: 21558 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9533 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-36252 1 Ibm 1 Storage Ts4500 Library 2026-10-22 6.3 Medium
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.
CVE-2026-3161 1 Ibm 1 Cloud Pak System 2026-10-22 5.9 Medium
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2026-15634 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 6.5 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks.
CVE-2026-15412 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 6.5 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8  could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
CVE-2026-15396 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 6.5 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks.
CVE-2026-11722 1 Ibm 3 Cics Tx Advanced, Websphere Application Server, Websphere Application Server Liberty 2026-10-22 4.8 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability.
CVE-2026-11549 1 Ibm 3 Cics Tx Advanced, Websphere Application Server, Websphere Application Server Liberty 2026-10-22 6.5 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by a virtual host bypass vulnerability.
CVE-2026-11548 1 Ibm 3 Cics Tx Advanced, Websphere Application Server, Websphere Application Server Liberty 2026-10-22 4.8 Medium
IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability.
CVE-2026-10841 1 Ibm 3 Cics Tx Advanced, Websphere Application Server, Websphere Application Server Liberty 2026-10-22 4.8 Medium
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling.
CVE-2026-93909 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 9.1 Critical
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.
CVE-2026-93905 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 8.2 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.
CVE-2026-93895 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 9.1 Critical
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.
CVE-2026-95695 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 7.4 High
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.
CVE-2026-95696 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-22 6.5 Medium
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.
CVE-2026-93744 1 Ibm 1 I 2026-10-21 6.5 Medium
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state.
CVE-2026-93442 1 Ibm 1 Qradar Security Information And Event Manager 2026-10-21 8.2 High
IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.
CVE-2026-9825 1 Ibm 1 Cyber Fraud 2026-10-21 3.7 Low
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.
CVE-2026-93888 1 Ibm 1 Sterling Connect Direct 2026-10-21 7.8 High
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
CVE-2026-87800 1 Ibm 1 Cyber Fraud 2026-10-21 6.8 Medium
IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.
CVE-2026-84884 1 Ibm 1 Guardium Data Protection 2026-10-20 7.5 High
IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token.