CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
229687 CVEs matched. Showing 1851–1900 (page 38 of 4594).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-18095 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 8.5 | 8.5 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18074 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 8.2 | 8.2 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18066 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 7.9 | 7.9 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17647 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17646 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 8.5 | 8.5 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17645 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | CRITICAL | 9.1 | 9.1 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17644 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17643 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17637 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17636 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17635 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | CRITICAL | 9.1 | 9.1 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17620 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | MEDIUM | 5.3 | 5.3 | — | ibm | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-17618 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 7.3 | 7.3 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17472 |
Multiple Vulnerabilities in IBM Concert Software | CRITICAL | 9.6 | 9.6 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-17465 |
Multiple Vulnerabilities in IBM Concert Software | MEDIUM | 6.5 | 6.5 | — | ibm | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-17102 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-16672 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-16469 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-16468 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-16426 |
Multiple Vulnerabilities in IBM Concert Software | MEDIUM | 6.5 | 6.5 | — | ibm | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-16346 |
DataStage on Cloud Pak for Data has several vulnerabilities | CRITICAL | 9.9 | 9.9 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-15915 |
Multiple Vulnerabilities in IBM Concert Software | MEDIUM | 6.2 | 6.2 | — | ibm | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2025-12767 |
Multiple Vulnerabilities in IBM Concert Software | MEDIUM | 5.3 | 5.3 | — | ibm | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2025-36084 |
Multiple Vulnerabilities in IBM Concert Software | MEDIUM | 5.9 | 5.9 | — | ibm | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-75101 |
Authorization bypass vulnerability in GitHub Enterprise Server allowed reading of private pull request diffs and patches… | MEDIUM | 6.0 | — | — | GitHub_P | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-77912 |
Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown … | HIGH | 7.4 | — | — | GitHub_P | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-77987 |
GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery | CRITICAL | 9.3 | — | — | GitHub_P | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-88020 |
Improper Neutralization of Input During Web Page Generation in OpenPLC Runtime v3 | MEDIUM | 5.3 | 6.1 | — | icscert | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-96260 |
Mattermost server missing request body size limit on plugin routes allows denial of service by an authenticated user | MEDIUM | 6.5 | 6.5 | — | Mattermost | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-96259 |
Mattermost server-side request forgery via OAuth endpoints configurable by a System Administrator | MEDIUM | 5.5 | 5.5 | — | Mattermost | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-96269 |
CVE-2026-96269 | HIGH | 7.5 | — | — | mitre | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-77426 |
Unleash: Missing await on permission check + cross-project IDOR in admin API | HIGH | 7.1 | — | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-67615 |
openEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invoker | HIGH | 8.7 | 8.8 | — | VulnCheck | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-77425 |
Unleash: A project member can reorder activation strategies belonging to any other project / environment (cross-project … | MEDIUM | 4.3 | 4.3 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-91018 |
Double Free in lwIP (lightweight IP) | HIGH | 8.7 | 8.8 | — | icscert | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-76910 |
Unleash: Clone-feature lets a user copy a feature from a project they cannot read | MEDIUM | 5.3 | — | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95815 |
OpenClaw iOS before 2026.8.11 Credential Exposure via Deep-Link URL Logging | HIGH | 7.2 | 6.3 | — | VulnCheck | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-95814 |
Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Check | HIGH | 8.6 | 8.1 | — | VulnCheck | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-95813 |
e621ng before 26.09.16 Open Redirect via URL Parameters | MEDIUM | 5.3 | 6.1 | — | VulnCheck | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95812 |
ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters | MEDIUM | 5.3 | 6.1 | — | VulnCheck | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-76909 |
Unleash: CR-approval email renders user-controlled raw HTML | LOW | 2.1 | — | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-62364 |
wlc may disclose API tokens to project-configured URLs | LOW | 2.3 | 2.3 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-94450 |
Potential denial of service when configured to send Retry packets in s2n-quic | HIGH | 8.7 | 7.5 | — | AMZN | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-79767 |
Gardener: Authorization Bypass via Group Subject Injection | MEDIUM | 5.5 | 5.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-61570 |
MPXJ: XXE Vulnerability in MerlinReader | HIGH | 7.5 | 7.5 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-65829 |
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers | MEDIUM | 5.3 | 5.3 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-77322 |
SIPGO: DoS via unvalidated WebSocket frame length | HIGH | 7.5 | 7.5 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-58268 |
SIPGO: DoS via unvalidated Content-Length in the stream parser | HIGH | 7.5 | 7.5 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-87121 |
Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application | CRITICAL | 9.3 | 9.8 | — | icscert | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-83805 |
Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of schedul… | MEDIUM | 6.4 | 6.4 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |