Export limit exceeded: 26155 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 421352 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 421352 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (421352 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-124493 1 Jihong88 1 Suneditor 2026-11-08 N/A
SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header textContent into innerHTML without HTML escaping. Attackers can store entity-encoded HTML in h1-h6 headers that executes JavaScript when editors using document:header mode initialize, enabling session cookie theft.
CVE-2026-18525 1 Ibm 1 Secure Proxy 2026-11-08 4.9 Medium
IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port.
CVE-2026-18484 1 Ibm 1 Contextforge Mcp Gateway 2026-11-08 6.5 Medium
IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions.
CVE-2026-18196 1 Ibm 1 App Connect Enterprise 2026-11-08 5.4 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to inject arbitrary HTML due to improper output neutralization.
CVE-2026-18195 1 Ibm 1 App Connect Enterprise 2026-11-08 4.2 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to perform content spoofing due to improper output encoding of error messages.
CVE-2026-18194 1 Ibm 1 App Connect Enterprise 2026-11-08 2.5 Low
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perform unauthorized actions due to missing anti-clickjacking controls.
CVE-2026-18093 1 Ibm 1 App Connect Enterprise 2026-11-08 7.5 High
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to broken access control.
CVE-2026-17466 1 Ibm 1 Optim 2026-11-08 9.1 Critical
IBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain sensitive information due to path traversal.
CVE-2026-17437 1 Ibm 1 App Connect Enterprise 2026-11-08 5.5 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.29 could allow a local attacker to perform an arbitrary file write due to improper validation of pathnames during archive extraction.
CVE-2026-16699 1 Ibm 1 Netezza Appliance 2026-11-08 6.5 Medium
IBM Netezza Appliance 11.3.0.2 Interim Fix 002 through 11.3.1.3 Interim Fix 006 could allow a remote authenticated attacker to change the passwords of other users due to improper authorization.
CVE-2026-16433 1 Ibm 1 Datastage On Cloud Pak For Data 2026-11-08 6.5 Medium
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to write arbitrary files due to a path traversal vulnerability.
CVE-2026-16427 1 Ibm 1 Datastage On Cloud Pak For Data 2026-11-08 6.5 Medium
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to write arbitrary files due to a path traversal vulnerability.
CVE-2026-16325 1 Ibm 1 Datastage On Cloud Pak For Data 2026-11-08 4.4 Medium
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary scripts due to improper neutralization of input in the X-Forwarded-Host header.
CVE-2026-15266 1 Ibm 1 Concert 2026-11-08 9.8 Critical
IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host.
CVE-2026-14963 1 Ibm 1 Cognos Command Center 2026-11-08 4.3 Medium
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to execute unauthorized processes due to cross-site request forgery.
CVE-2026-76052 1 Ibm 2 Storage Scale, Storage Scale System 2026-11-08 6 Medium
IBM Storage Scale System 6.2.3.0 through 6.2.3.6, and 7.0.0.0 through 7.0.1.0 and IBM Storage Scale 6.0.0.0 through 6.0.1.0, and 5.2.3.0 through 5.2.3.8 could allow an attacker to leverage an undocumented flag to gain access to an unauthenticated path in the REST API.
CVE-2026-14437 1 Ibm 1 Storage Scale 2026-11-08 6.5 Medium
IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
CVE-2026-14469 1 Ibm 1 Storage Scale 2026-11-08 5.4 Medium
IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow an authenticated attacker to access and manipulate filesets beyond their control due to improper authorization.
CVE-2026-14435 1 Ibm 1 Turbonomic Kubeturbo Agent 2026-11-08 5.9 Medium
IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.
CVE-2026-14434 1 Ibm 1 Turbonomic Kubeturbo Agent 2026-11-08 5.9 Medium
IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.