Export limit exceeded: 396000 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9140 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-84239 1 Ibm 1 Guardium Data Protection 2026-09-19 7.6 High
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.
CVE-2026-84108 1 Ibm 1 Guardium Data Protection 2026-09-19 8.1 High
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-84105 1 Ibm 1 Guardium Data Protection 2026-09-19 7.7 High
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.
CVE-2026-84089 1 Ibm 1 Guardium Data Protection 2026-09-19 7.8 High
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.
CVE-2026-84086 1 Ibm 1 Guardium Data Protection 2026-09-19 7.2 High
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.
CVE-2026-84085 1 Ibm 1 Guardium Data Protection 2026-09-19 8.1 High
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.
CVE-2026-10744 1 Ibm 1 Mq For Hpe Nonstop 2026-09-18 7.5 High
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation.
CVE-2026-10841 1 Ibm 1 Cics Tx Advanced 2026-09-18 4.2 Medium
IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling.
CVE-2026-10858 1 Ibm 1 Mq For Hpe Nonstop 2026-09-18 9.9 Critical
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages.
CVE-2026-84106 1 Ibm 1 Guardium Data Protection 2026-09-18 8.9 High
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-84084 1 Ibm 1 Guardium Data Protection 2026-09-18 8.8 High
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability.
CVE-2026-84077 1 Ibm 1 Guardium Data Protection 2026-09-18 8.1 High
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability.
CVE-2026-84071 1 Ibm 1 Guardium Data Protection 2026-09-18 7.2 High
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in arbitrary command execution with root-level privileges.
CVE-2026-84031 1 Ibm 1 Guardium Data Protection 2026-09-18 9 Critical
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-82890 1 Ibm 1 Guardium Data Protection 2026-09-18 5.9 Medium
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generation.
CVE-2025-13882 1 Ibm 2 Sterling Partner Engagement Manager Essentials Edition, Sterling Partner Engagement Manager Standard Edition 2026-09-18 5.3 Medium
IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to improper control of interaction frequency.
CVE-2025-14754 1 Ibm 1 Cloud Pak For Data 2026-09-18 8.8 High
IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
CVE-2025-36076 1 Ibm 1 Cognos Analytics 2026-09-18 4.3 Medium
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system.
CVE-2026-81937 1 Ibm 1 Guardium Data Protection 2026-09-18 7.2 High
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root privileges and impact to the confidentiality, integrity, and availability of the affected system.
CVE-2026-81933 1 Ibm 1 Guardium Data Protection 2026-09-18 8.8 High
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A low-privileged authenticated user can inject SQL statements through the analytic cases grid endpoint, potentially resulting in unauthorized access to sensitive data and impact to the confidentiality, integrity, and availability of the affected system.