Browse All CVEs
39,756 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-18098 |
high | 8.1 | 0.0025 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensiti | |
CVE-2026-18106 |
medium | 4.3 | 0.0050 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensiti | |
CVE-2026-18144 |
medium | 4.3 | 0.0032 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass securit | |
CVE-2026-18246 |
medium | 4.3 | 0.0032 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass securit | |
CVE-2026-18499 |
high | 8.1 | 0.0042 | 2026-10-29 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a pr | |
CVE-2026-18683 |
high | 8.8 | 0.0066 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An | |
CVE-2026-18847 |
critical | 9.8 | 0.0025 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest cred | |
CVE-2026-73237 |
medium | 6.1 | 0.0079 | 2026-10-29 | XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura | |
CVE-2026-73238 |
medium | 6.1 | 0.0079 | 2026-10-29 | XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: bef | |
CVE-2026-73239 |
medium | 6.5 | 0.0062 | 2026-10-29 | Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Arti | |
CVE-2026-73240 |
critical | 9.8 | 0.0104 | 2026-10-29 | Specifically crafted inputs may lead to git argument injection in Apache Allura. This iss | |
CVE-2026-73295 |
medium | 5.4 | 0.0033 | 2026-10-29 | Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2 | |
CVE-2026-73296 |
critical | 9.4 | 0.0365 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-73297 |
medium | 6.9 | 0.0290 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-16856 |
high | 8.8 | 0.0050 | 2026-10-29 | IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to imprope | |
CVE-2026-16860 |
critical | 9.9 | 0.0075 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitr | |
CVE-2026-16863 |
high | 7.7 | 0.0047 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensiti | |
CVE-2026-16904 |
high | 8.1 | 0.0052 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitr | |
CVE-2026-16906 |
high | 8.8 | 0.0079 | 2026-10-29 | IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary comman | |
CVE-2026-16907 |
high | 7.6 | 0.0057 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitr | |
CVE-2026-16931 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service du | |
CVE-2026-16956 |
critical | 9.8 | 0.0086 | 2026-10-29 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary | |
CVE-2026-17109 |
medium | 4.3 | 0.0045 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected | |
CVE-2026-17110 |
high | 8.8 | 0.0075 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitr | |
CVE-2026-17218 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due t | |
CVE-2026-17222 |
medium | 4.3 | 0.0034 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in | |
CVE-2026-17248 |
medium | 6.5 | 0.0047 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial | |
CVE-2026-17266 |
medium | 6.5 | 0.0066 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensiti | |
CVE-2026-17268 |
medium | 6.8 | 0.0034 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass securit | |
CVE-2026-17271 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service du | |
CVE-2026-17276 |
critical | 9.9 | 0.0047 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privi | |
CVE-2026-17418 |
high | 7.8 | 0.0030 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial | |
CVE-2026-17419 |
medium | 6.5 | 0.0042 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tab | |
CVE-2026-17420 |
medium | 6.3 | 0.0037 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass securit | |
CVE-2026-18235 |
high | 8.3 | 0.0054 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitr | |
CVE-2026-18250 |
medium | 5.0 | 0.0027 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensiti | |
CVE-2026-18669 |
high | 8.8 | 0.0075 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a re | |
CVE-2026-18713 |
high | 8.8 | 0.0052 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An | |
CVE-2026-42018 |
high | 7.5 | 0.0998 | 2026-10-29 | KEV | JFrog Artifactory contains an improper authentication vulnerability that could return an i |
CVE-2026-49467 |
high | 8.8 | 0.0062 | 2026-10-29 | Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in | |
CVE-2026-69106 |
high | 8.8 | 0.0052 | 2026-10-29 | A low-privileged user may poison cached artifact metadata under specific conditions, poten | |
CVE-2026-73298 |
high | 8.7 | 0.0097 | 2026-10-29 | The Microsoft Container Migration Solution Accelerator is a multi-service application that | |
CVE-2026-73299 |
critical | 10.0 | 0.0178 | 2026-10-29 | Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 0.1.5 and 2.0.0-bet | |
CVE-2026-18673 |
medium | 5.3 | 0.0046 | 2026-10-29 | When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the | |
CVE-2026-18675 |
medium | 5.3 | 0.0056 | 2026-10-29 | The dataplane token validator in kuma-cp performs an unchecked Go type assertion on the JW | |
CVE-2026-18676 |
medium | 5.1 | 0.0030 | 2026-10-29 | The default kuma-cp configuration in Kong Mesh reveals the admin bootstrap token and signi | |
CVE-2026-18677 |
medium | 6.0 | 0.0058 | 2026-10-29 | In Kong Mesh running in universal mode with a MeshIdentity whose SPIFFE ID path template d | |
CVE-2026-18678 |
medium | 5.5 | 0.0013 | 2026-10-29 | When an operator adds an HTTPS control plane profile to kumactl without providing a CA cer | |
CVE-2026-12004 |
high | 8.7 | 0.0049 | 2026-10-29 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 throu | |
CVE-2026-12005 |
high | 7.2 | 0.0054 | 2026-10-29 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 throu |