CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16165 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16164 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16163 | HIGH | 8.6 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16161 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16159 | HIGH | 8.6 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-16111 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-15824 | HIGH | 8.2 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-15822 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-15819 | HIGH | 7.5 | 0.3% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-15784 | HIGH | 8.1 | 0.4% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-15781 | HIGH | 8 | 0.4% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-15762 | CRITICAL | 9.8 | 0.5% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14991 | CRITICAL | 9.8 | 0.4% | Oct 8, 2026 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 throug... |
| CVE-2026-14990 | CRITICAL | 9.3 | — | Oct 8, 2026 | IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an una... |
| CVE-2026-107615 | HIGH | 7.8 | — | Oct 8, 2026 | An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local a... |
| CVE-2026-107614 | MEDIUM | 6.1 | — | Oct 8, 2026 | An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 all... |
| CVE-2026-107613 | MEDIUM | 5.9 | — | Oct 8, 2026 | A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows befor... |
| CVE-2026-107612 | HIGH | 7.8 | — | Oct 8, 2026 | Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user ... |
| CVE-2026-107611 | HIGH | 7.1 | — | Oct 8, 2026 | An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a m... |
| CVE-2026-104634 | LOW | 2.3 | — | Oct 8, 2026 | Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows an MCP client's JSON ... |
| CVE-2026-103663 | CRITICAL | 9.4 | — | Oct 8, 2026 | Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by th... |
| CVE-2026-66479 | HIGH | 7.1 | — | Oct 8, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This i... |
| CVE-2026-62142 | HIGH | 8.8 | — | Oct 8, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue ... |
| CVE-2026-62128 | MEDIUM | 5.3 | 0.2% | Oct 8, 2026 | Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-62127 | MEDIUM | 6.5 | — | Oct 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MediaRon LLC WP Pl... |