Export limit exceeded: 21693 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9855 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-101294 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-14 8.7 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature.
CVE-2026-84290 2 Ibm, Microsoft 2 Guardium Data Protection, Windows 2026-10-13 5.1 Medium
IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileged local attacker to cause a system crash or perform limited kernel-memory reads.
CVE-2026-18513 1 Ibm 1 Maximo Application Suite Location Service For Esri Component 2026-10-13 7.2 High
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.
CVE-2026-93907 1 Ibm 1 Websphere Application Server 2026-10-13 8.1 High
IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.
CVE-2026-93891 1 Ibm 1 Tririga Application Platform 2026-10-13 7.6 High
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
CVE-2026-92832 1 Ibm 1 Aspera Enterprise Webapps 2026-10-13 5.1 Medium
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
CVE-2026-90921 1 Ibm 1 Maximo Ai Service 2026-10-13 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
CVE-2026-90920 1 Ibm 1 Maximo Ai Service 2026-10-13 9.8 Critical
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
CVE-2026-90911 1 Ibm 1 Maximo Ai Service 2026-10-13 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-78673 1 Ibm 1 Maximo Ai Service 2026-10-13 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
CVE-2026-75782 1 Ibm 1 Aspera Enterprise Webapps 2026-10-13 7.8 High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
CVE-2026-75076 1 Ibm 1 Aspera Enterprise Webapps 2026-10-13 4.3 Medium
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.
CVE-2026-18517 1 Ibm 1 Maximo Application Suite Location Service For Esri Component 2026-10-13 7.7 High
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy.
CVE-2026-103499 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-13 7.5 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-102627 1 Ibm 1 Tririga Application Platform 2026-10-13 8.8 High
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction.
CVE-2026-95680 1 Ibm 1 Websphere Application Server 2026-10-13 8 High
IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.
CVE-2026-93892 1 Ibm 1 Tririga Application Platform 2026-10-13 8.1 High
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
CVE-2026-90912 1 Ibm 1 Maximo Ai Service 2026-10-13 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
CVE-2026-75881 1 Ibm 1 Maximo Application Suite Iot Component 2026-10-13 7.5 High
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.
CVE-2026-75621 1 Ibm 1 Aspera Enterprise Webapps 2026-10-13 6.2 Medium
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.