CVE Vulnerability Database
Search and browse 381,217 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-12733 | HIGH | 7.5 | 0.3% | Jul 30, 2026 | IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations. |
| CVE-2026-12118 | CRITICAL | 9.8 | 0.5% | Jul 30, 2026 | IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary co... |
| CVE-2026-11904 | MEDIUM | 5.3 | 0.3% | Jul 30, 2026 | IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Ident... |
| CVE-2026-10700 | MEDIUM | 6.5 | 0.4% | Jul 30, 2026 | IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API th... |
| CVE-2026-10695 | MEDIUM | 5.5 | 0.1% | Jul 30, 2026 | IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated qu... |
| CVE-2026-10545 | HIGH | 7.5 | 0.2% | Jul 30, 2026 | IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect ... |
| CVE-2026-10535 | HIGH | 7.8 | 0.1% | Jul 30, 2026 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc. |
| CVE-2025-36374 | MEDIUM | 5.5 | — | Jul 30, 2026 | IBM DataPower Gateway is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privile... |
| CVE-2025-0152 | MEDIUM | 6.1 | 0.2% | Jul 30, 2026 | IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.1... |
| CVE-2024-40683 | MEDIUM | 6.3 | 0.2% | Jul 30, 2026 | IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2,... |
| CVE-2024-25039 | HIGH | 7.5 | 0.3% | Jul 30, 2026 | IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.1... |
| CVE-2026-9322 | HIGH | 7.5 | 0.3% | Jul 30, 2026 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 a... |
| CVE-2026-66414 | MEDIUM | 6.1 | — | Jul 30, 2026 | Leantime 3.6.2 contains an open redirect vulnerability in the Login controller that allows unauthenticated attackers to ... |
| CVE-2026-62663 | HIGH | 7.5 | — | Jul 30, 2026 | Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filt... |
| CVE-2026-54722 | HIGH | 8.7 | — | Jul 30, 2026 | DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is_... |
| CVE-2026-54522 | MEDIUM | 5.4 | 0.1% | Jul 30, 2026 | MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::B... |
| CVE-2026-51295 | — | — | 0.2% | Jul 30, 2026 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2026-51294 | — | — | 0.1% | Jul 30, 2026 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2026-51293 | — | — | 0.1% | Jul 30, 2026 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2026-51292 | — | — | 0.3% | Jul 30, 2026 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2026-51291 | — | — | 0.3% | Jul 30, 2026 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2026-51290 | — | — | 0.3% | Jul 30, 2026 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2026-13379 | CRITICAL | 9.1 | 0.3% | Jul 30, 2026 | The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS stat... |
| CVE-2026-13117 | HIGH | 8.1 | 0.4% | Jul 30, 2026 | An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to tr... |
| CVE-2026-12996 | HIGH | 8.1 | 0.4% | Jul 30, 2026 | A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to poten... |