Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (958 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-14532 1 Ibm 2 Websphere Application Server Liberty, Websphere Application Server Liberty 2026-10-17 4.3 Medium
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception.
CVE-2026-79715 1 Ibm 1 Websphere Application Server Liberty 2026-10-16 5.5 Medium
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory.
CVE-2026-105442 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-14 7.5 High
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause a denial of service caused by an insecure deserialization in the messaging service.
CVE-2026-14909 1 Ibm 1 Websphere Application Server Liberty 2026-10-14 6.5 Medium
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is enbabled.
CVE-2026-101294 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-14 8.7 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature.
CVE-2026-105443 1 Ibm 1 Websphere Application Server Liberty 2026-10-13 8.2 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install.
CVE-2026-93907 1 Ibm 1 Websphere Application Server 2026-10-13 8.1 High
IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.
CVE-2026-103499 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-10-13 7.5 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-95680 1 Ibm 1 Websphere Application Server 2026-10-13 8 High
IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.
CVE-2026-11538 1 Ibm 1 Websphere Application Server 2026-09-24 3.7 Low
IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies.
CVE-2026-15064 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-09-23 8.7 High
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.
CVE-2026-14981 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-09-23 7.5 High
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits.
CVE-2026-15328 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-09-23 7.4 High
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling.
CVE-2026-11711 1 Ibm 1 Websphere Application Server 2026-09-19 6.5 Medium
IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component.
CVE-2026-11710 1 Ibm 1 Websphere Application Server 2026-09-19 6.5 Medium
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers.
CVE-2026-11545 1 Ibm 1 Websphere Application Server 2026-09-19 3.7 Low
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks.
CVE-2026-11540 1 Ibm 1 Websphere Application Server 2026-09-19 5.3 Medium
IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.
CVE-2026-11539 1 Ibm 1 Websphere Application Server 2026-09-19 5.3 Medium
IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector.
CVE-2026-11537 1 Ibm 1 Websphere Application Server 2026-09-19 4.3 Medium
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.
CVE-2026-9336 1 Ibm 1 Websphere Application Server 2026-09-16 6.5 Medium
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space.