Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-84229 |
medium | 6.5 | 0.0021 | 2026-11-08 | IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restr | |
CVE-2026-101366 |
medium | 4.3 | 0.0028 | 2026-11-08 | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are | |
CVE-2026-9764 |
high | 8.8 | 0.0029 | 2026-11-08 | IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the | |
CVE-2026-97677 |
high | 8.1 | 0.0039 | 2026-11-08 | IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-co | |
CVE-2026-18893 |
high | 7.1 | 0.0014 | 2026-11-08 | IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and | |
CVE-2026-19307 |
medium | 4.3 | 0.0027 | 2026-11-08 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1, and I | |
CVE-2026-19133 |
high | 8.1 | 0.0030 | 2026-11-08 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated att | |
CVE-2026-18668 |
medium | 6.5 | 0.0032 | 2026-11-08 | IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 - 6.2.2.1_1 could allow a | |
CVE-2026-18546 |
medium | 5.4 | 0.0017 | 2026-11-08 | IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and | |
CVE-2026-76052 |
medium | 6.0 | 0.0011 | 2026-11-08 | IBM Storage Scale System 6.2.3.0 through 6.2.3.6, and 7.0.0.0 through 7.0.1.0 and IBM Stor | |
CVE-2026-14963 |
medium | 4.3 | 0.0015 | 2026-11-08 | IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to execute una | |
CVE-2026-16433 |
medium | 6.5 | 0.0033 | 2026-11-08 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to | |
CVE-2026-16427 |
medium | 6.5 | 0.0033 | 2026-11-08 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to | |
CVE-2026-16325 |
medium | 4.4 | 0.0017 | 2026-11-08 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to | |
CVE-2026-15266 |
critical | 9.8 | 0.0088 | 2026-11-08 | IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command | |
CVE-2026-18093 |
high | 7.5 | 0.0049 | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obta | |
CVE-2026-17466 |
critical | 9.1 | 0.0037 | 2026-11-08 | IBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain se | |
CVE-2026-17437 |
medium | 5.5 | 0.0016 | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.29 coul | |
CVE-2026-16699 |
medium | 6.5 | 0.0027 | 2026-11-08 | IBM Netezza Appliance 11.3.0.2 Interim Fix 002 through 11.3.1.3 Interim Fix 006 could allo | |
CVE-2026-18525 |
medium | 4.9 | 0.0030 | 2026-11-08 | IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to ca | |
CVE-2026-18484 |
medium | 6.5 | 0.0050 | 2026-11-08 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attac | |
CVE-2026-18196 |
medium | 5.4 | 0.0023 | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 coul | |
CVE-2026-18195 |
medium | 4.2 | 0.0015 | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 coul | |
CVE-2026-18194 |
low | 2.5 | 0.0011 | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perf | |
CVE-2026-14375 |
medium | 5.9 | 0.0019 | 2026-11-08 | IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.1.0 does not validate or improperly val | |
CVE-2026-12737 |
medium | 4.4 | 0.0012 | 2026-11-08 | IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.1_1 and IBM Sterling File Gateway 6.2.2. | |
CVE-2026-12735 |
medium | 4.3 | 0.0027 | 2026-11-08 | IBM Controller Disclosure Management 1.0.0.0 could allow an attacker to obtain sensitive E | |
CVE-2026-120115 |
medium | 6.3 | 0.0026 | 2026-11-08 | IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification | |
CVE-2026-120113 |
medium | 6.4 | 0.0037 | 2026-11-08 | IBM Aspera Connect 1.6.1 through 4.2.19 could allow a remote attacker to obtain sensitive | |
CVE-2026-14435 |
medium | 5.9 | 0.0013 | 2026-11-08 | IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly valid | |
CVE-2026-14434 |
medium | 5.9 | 0.0013 | 2026-11-08 | IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly valid | |
CVE-2026-14377 |
medium | 5.4 | 0.0015 | 2026-11-08 | IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 is vulnerable to server-side request | |
CVE-2026-14469 |
medium | 5.4 | 0.0018 | 2026-11-08 | IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow an authenticated attack | |
CVE-2026-14437 |
medium | 6.5 | 0.0049 | 2026-11-08 | IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow a remote attacker to tra | |
CVE-2026-11547 |
medium | 4.3 | 0.0018 | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by a serve | |
CVE-2026-119670 |
medium | 6.3 | 0.0037 | 2026-11-08 | IBM Storage Copy Data Management 2.2.0.0 through 2.3.1.0 could allow an authenticated user | |
CVE-2026-117545 |
high | 8.8 | 0.0037 | 2026-11-08 | IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypa | |
CVE-2026-116501 |
high | 8.4 | 0.0017 | 2026-11-08 | IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to execute arbitrary code | |
CVE-2026-116500 |
medium | 6.2 | 0.0016 | 2026-11-08 | IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to cause a denial of servi | |
CVE-2026-116499 |
high | 8.4 | 0.0025 | 2026-11-08 | IBM Qiskit SDK 1.4.2 through 2.6.2 could allow a local attacker to execute arbitrary code | |
CVE-2026-115554 |
medium | 6.4 | 0.0015 | 2026-11-08 | IBM Tivoli Netcool/OMNIbus 8.1.0 through 8.1.0.41 is vulnerable to stored cross-site scrip | |
CVE-2026-114464 |
critical | 9.3 | 0.0021 | 2026-11-08 | IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive i | |
CVE-2026-113698 |
medium | 6.5 | 0.0024 | 2026-11-08 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of serv | |
CVE-2026-112369 |
medium | 4.3 | 0.0017 | 2026-11-08 | IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to perform unauth | |
CVE-2026-110273 |
high | 8.8 | 0.0057 | 2026-11-08 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.9 IBM TRIRIGA could allow a remote auth | |
CVE-2026-10844 |
medium | 4.3 | 0.0034 | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow a remote a | |
CVE-2026-108292 |
medium | 5.5 | 0.0013 | 2026-11-08 | IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file | |
CVE-2026-108284 |
medium | 6.5 | 0.0022 | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authent | |
CVE-2026-107331 |
critical | 9.9 | 0.0050 | 2026-11-08 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to | |
CVE-2026-107330 |
high | 7.7 | 0.0025 | 2026-11-08 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to |