Export limit exceeded: 421371 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (421371 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-120115 | 1 Ibm | 1 Aspera Connect | 2026-11-08 | 6.3 Medium |
| IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification across all REST API endpoints. An attacker who convinces a user to visit a malicious website could delete or inspect account configurations. | ||||
| CVE-2026-120113 | 1 Ibm | 1 Aspera Connect | 2026-11-08 | 6.4 Medium |
| IBM Aspera Connect 1.6.1 through 4.2.19 could allow a remote attacker to obtain sensitive information and modify host trust configuration due to missing authentication and overly permissive cross-origin access controls in the local HTTP service. By persuading a victim to visit a malicious web page, an attacker could perform unauthorized cross-origin requests to read and modify configuration. | ||||
| CVE-2026-119670 | 1 Ibm | 1 Storage Copy Data Management | 2026-11-08 | 6.3 Medium |
| IBM Storage Copy Data Management 2.2 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input. | ||||
| CVE-2026-117545 | 1 Ibm | 1 Webmethods Integration Server | 2026-11-08 | 8.8 High |
| IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. | ||||
| CVE-2026-116501 | 1 Ibm | 1 Qiskit Sdk | 2026-11-08 | 8.4 High |
| IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write caused by improper input validation when accessing a corrupted unitary matrix. | ||||
| CVE-2026-116500 | 1 Ibm | 1 Qiskit Sdk | 2026-11-08 | 6.2 Medium |
| IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to cause a denial of service due to unbound recursion during deserialization of untrusted QPY payloads. | ||||
| CVE-2026-116499 | 1 Ibm | 1 Qiskit Sdk | 2026-11-08 | 8.4 High |
| IBM Qiskit SDK 1.4.2 through 2.6.2 could allow a local attacker to execute arbitrary code due to deserialization of untrusted data. | ||||
| CVE-2026-115554 | 1 Ibm | 1 Tivoli Netcoolomnibus | 2026-11-08 | 6.4 Medium |
| IBM Tivoli Netcool/OMNIbus 8.1.0 through 8.1.0.41 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | ||||
| CVE-2026-11547 | 1 Ibm | 1 Websphere Application Server Liberty | 2026-11-08 | 4.3 Medium |
| IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by a server-side request forgery vulnerability in the Admin Center deploy validation endpoint. | ||||
| CVE-2026-114464 | 1 Ibm | 1 Process Mining | 2026-11-08 | 9.3 Critical |
| IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control. | ||||
| CVE-2026-113698 | 1 Ibm | 1 Db2 | 2026-11-08 | 6.5 Medium |
| IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table. | ||||
| CVE-2026-112369 | 1 Ibm | 1 Process Mining | 2026-11-08 | 4.3 Medium |
| IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms. | ||||
| CVE-2026-110273 | 1 Ibm | 1 Tririga Application Platform | 2026-11-08 | 8.8 High |
| IBM TRIRIGA Application Platform 5.0.0 through 5.0.9 IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. | ||||
| CVE-2026-10844 | 1 Ibm | 1 Websphere Application Server Liberty | 2026-11-08 | 4.3 Medium |
| IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow a remote attacker to conduct phishing attacks. | ||||
| CVE-2026-108292 | 1 Ibm | 1 Process Mining | 2026-11-08 | 5.5 Medium |
| IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened. | ||||
| CVE-2026-108284 | 1 Ibm | 1 Websphere Application Server Liberty | 2026-11-08 | 6.5 Medium |
| IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information. | ||||
| CVE-2026-107331 | 1 Ibm | 1 Datastage On Cloud Pak For Data | 2026-11-08 | 9.9 Critical |
| IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability. | ||||
| CVE-2026-107330 | 1 Ibm | 1 Datastage On Cloud Pak For Data | 2026-11-08 | 7.7 High |
| IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to a Server-Side Request Forgery (SSRF) vulnerability. | ||||
| CVE-2026-105467 | 1 Ibm | 1 Qradar Security Information And Event Manager | 2026-11-08 | 8.1 High |
| IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 is vulnerable to Reflected XSS. A victim must open a specifically crafted URL while authenticated to QRadar to trigger this. | ||||
| CVE-2026-124432 | 1 Thorsten | 1 Phpmyfaq | 2026-11-08 | 7.3 High |
| phpMyFAQ 4.1.9 before 4.1.11 and 4.2.0 pre-releases before 4.2.0-beta.3 contain an account enumeration vulnerability in the unauthenticated POST /api/webauthn/prepare-login endpoint, which returns stable stored credential IDs for passkey-registered accounts but an md5(time())-derived fallback ID otherwise. Unauthenticated attackers can compare allowCredentials IDs from requests sent more than one second apart, without rate limiting, to identify existing passkey-registered accounts and their credential IDs. | ||||