Export limit exceeded: 421340 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 421340 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (421340 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-17426 | 1 Ibm | 1 Openbmc | 2026-11-08 | 6.5 Medium |
| IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception. | ||||
| CVE-2026-16697 | 1 Ibm | 2 Openbmc, Power Hardware Management Console | 2026-11-08 | 6.5 Medium |
| IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources. | ||||
| CVE-2026-16682 | 1 Ibm | 2 Hardware Management Console, Openbmc | 2026-11-08 | 6.5 Medium |
| IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialized resources. | ||||
| CVE-2026-105473 | 1 Ibm | 2 Qradar, Qradar Security Information And Event Manager | 2026-11-08 | 4.6 Medium |
| IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 is vulnerable to Open Redirect. A victim must open a specifically crafted URL while authenticated to QRadar to trigger this. | ||||
| CVE-2026-97677 | 1 Ibm | 1 Langflow Oss | 2026-11-08 | 8.1 High |
| IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. Via a crafted on-disk index, the attacker could also read the contents of arbitrary files accessible to the service process — including configuration files, secrets, or database files stored under the application's data directory. | ||||
| CVE-2026-9764 | 1 Ibm | 1 Bob | 2026-11-08 | 8.8 High |
| IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code. | ||||
| CVE-2026-93879 | 2 Hibernate, Ibm | 2 Hibernate-validator, Hibernate Validator | 2026-11-08 | 7.5 High |
| Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language (EL) expressions. | ||||
| CVE-2026-93005 | 1 Ibm | 1 Process Mining | 2026-11-08 | 6.5 Medium |
| IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through insufficient rate limiting of email notifications, resulting in excessive emails being sent to targeted recipients. | ||||
| CVE-2026-8860 | 1 Ibm | 2 Security Verify Directory, Verify Directory | 2026-11-08 | 6.5 Medium |
| IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs. | ||||
| CVE-2026-8642 | 1 Ibm | 2 Security Verify Directory, Verify Directory | 2026-11-08 | 4.3 Medium |
| IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that disclose system information including server versions and session identifiers. This information can be used to identify vulnerable software versions. | ||||
| CVE-2026-8640 | 1 Ibm | 2 Security Verify Directory, Verify Directory | 2026-11-08 | 3.5 Low |
| IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 does not set the SameSite attribute on session cookies, making it vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can cause authenticated users' browsers to send unauthorized requests to the application. | ||||
| CVE-2026-8639 | 1 Ibm | 2 Security Verify Directory, Verify Directory | 2026-11-08 | 8.8 High |
| IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation. An attacker can establish a session and, after the victim authenticates, hijack the authenticated session to gain unauthorized access to the directory management console. | ||||
| CVE-2026-84237 | 1 Ibm | 1 Guardium Data Protection | 2026-11-08 | 3.1 Low |
| IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. | ||||
| CVE-2026-84229 | 1 Ibm | 1 Guardium Data Protection | 2026-11-08 | 6.5 Medium |
| IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests. | ||||
| CVE-2026-84228 | 1 Ibm | 1 Guardium Data Protection | 2026-11-08 | 3.1 Low |
| IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. | ||||
| CVE-2026-84030 | 1 Ibm | 1 Guardium Data Protection | 2026-11-08 | 5.6 Medium |
| IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command. | ||||
| CVE-2026-82830 | 1 Ibm | 1 Guardium Data Protection | 2026-11-08 | 6.7 Medium |
| IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of argument delimiters. | ||||
| CVE-2026-81542 | 1 Ibm | 1 Datastage On Cloud Pak For Data | 2026-11-08 | 6.4 Medium |
| IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to delete arbitrary files due to path traversal. | ||||
| CVE-2026-81209 | 1 Ibm | 2 Sterling B2b Integrator, Sterling File Gateway | 2026-11-08 | 4.9 Medium |
| IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials. | ||||
| CVE-2026-80435 | 1 Ibm | 1 Datastage On Cloud Pak For Data | 2026-11-08 | 5 Medium |
| IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw. | ||||