CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-14508 | CRITICAL | 9.1 | 0.2% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14507 | HIGH | 7.7 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service... |
| CVE-2026-14502 | CRITICAL | 9.8 | 0.4% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14497 | HIGH | 8.1 | 0.6% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14496 | HIGH | 8.2 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14273 | MEDIUM | 6.5 | 0.1% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14269 | CRITICAL | 9.8 | 0.5% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-13258 | MEDIUM | 5.4 | 0.2% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-13257 | MEDIUM | 6.5 | 0.1% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-12859 | MEDIUM | 6.5 | 0.2% | Oct 8, 2026 | Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functio... |
| CVE-2026-107640 | CRITICAL | 9.1 | — | Oct 8, 2026 | Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ t... |
| CVE-2026-107639 | HIGH | 8.8 | 0.7% | Oct 8, 2026 | ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQue... |
| CVE-2026-107638 | MEDIUM | 6.8 | — | Oct 8, 2026 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerabili... |
| CVE-2026-107637 | MEDIUM | 4.3 | — | Oct 8, 2026 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper authorization vulnerability in the note module del... |
| CVE-2026-107636 | MEDIUM | 6.5 | — | Oct 8, 2026 | pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-... |
| CVE-2026-107635 | MEDIUM | 6.1 | 0.1% | Oct 8, 2026 | Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to... |
| CVE-2026-107634 | MEDIUM | 6.1 | 0.1% | Oct 8, 2026 | Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that neve... |
| CVE-2026-107623 | MEDIUM | 4.3 | 0.2% | Oct 8, 2026 | A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serializatio... |
| CVE-2026-107604 | MEDIUM | 4.9 | — | Oct 8, 2026 | A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management serv... |
| CVE-2026-107589 | HIGH | 7.5 | — | Oct 8, 2026 | Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to generat... |
| CVE-2026-107586 | MEDIUM | 4.3 | — | Oct 8, 2026 | Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer 6.2.28 through 6.3.5... |
| CVE-2026-107585 | MEDIUM | 5.3 | — | Oct 8, 2026 | Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer 6.3.4 and 6.3.5 all... |
| CVE-2026-107565 | MEDIUM | 5.1 | 0.1% | Oct 8, 2026 | A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving meta... |
| CVE-2026-107286 | HIGH | 7.5 | 0.4% | Oct 8, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 2.10.0 until 2.... |
| CVE-2026-105833 | HIGH | 7.7 | — | Oct 8, 2026 | EspoCRM before 10.0.5 contains an insecure direct object reference vulnerability in PersonalAccount\Service that allows ... |