Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9441 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-18513 1 Ibm 1 Maximo Application Suite Location Service For Esri Component 2026-10-13 7.2 High
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.
CVE-2026-93907 1 Ibm 1 Websphere Application Server 2026-10-13 8.1 High
IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.
CVE-2026-93891 1 Ibm 1 Tririga Application Platform 2026-10-13 7.6 High
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
CVE-2026-92832 1 Ibm 1 Aspera Enterprise Webapps 2026-10-13 5.1 Medium
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
CVE-2026-90921 1 Ibm 1 Maximo Ai Service 2026-10-13 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
CVE-2026-90920 1 Ibm 1 Maximo Ai Service 2026-10-13 9.8 Critical
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
CVE-2026-90911 1 Ibm 1 Maximo Ai Service 2026-10-13 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-78673 1 Ibm 1 Maximo Ai Service 2026-10-13 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
CVE-2026-75782 1 Ibm 1 Aspera Enterprise Webapps 2026-10-13 7.8 High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
CVE-2026-75076 1 Ibm 1 Aspera Enterprise Webapps 2026-10-13 4.3 Medium
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.
CVE-2026-18517 1 Ibm 1 Maximo Application Suite Location Service For Esri Component 2026-10-13 7.7 High
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy.
CVE-2026-103499 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-13 7.5 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-102627 1 Ibm 1 Tririga Application Platform 2026-10-13 8.8 High
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction.
CVE-2026-95680 1 Ibm 1 Websphere Application Server 2026-10-13 8 High
IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.
CVE-2026-93892 1 Ibm 1 Tririga Application Platform 2026-10-13 8.1 High
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
CVE-2026-90912 1 Ibm 1 Maximo Ai Service 2026-10-13 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
CVE-2026-75881 1 Ibm 1 Maximo Application Suite Iot Component 2026-10-13 7.5 High
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.
CVE-2026-75621 1 Ibm 1 Aspera Enterprise Webapps 2026-10-13 6.2 Medium
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
CVE-2026-75095 1 Ibm 1 Aspera Enterprise Webapps 2026-10-13 7.5 High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-75063 1 Ibm 1 Planning Analytics 2026-10-13 5.4 Medium
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.