CVEs
Browse the synced catalog, newest first.
- CVE-2026-108284IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilitiesIBM WebSphere Application Server - Liberty
- CVE-2026-107331DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-107330DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-105473IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSSIBM QRadar
- CVE-2026-105467IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSSIBM QRadar
- CVE-2026-103320IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilitiesIBM WebSphere Application Server - Liberty
- CVE-2026-102618IBM i is Affected by a Protection Mechanism FailureIBM i
- CVE-2026-101117IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.IBM WebSphere Extreme Scale
- CVE-2025-36075IBM Safer Payments could allow an authenticated user to obtain sensitive informationIBM Safer Payments
- CVE-2026-61987WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerabilityWC Lovers WCFM – Frontend Manager for WooCommerce
- CVE-2026-114186WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilityWPVibes AnyWhere Elementor
- CVE-2026-114189WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerabilityWPVibes AnyWhere Elementor
- CVE-2026-109900WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerabilityMelapress Role Editor
- CVE-2026-120858WordPress FluentForm plugin <= 6.2.16 - Broken Access Control vulnerabilityWP ManageNinja FluentForm
- CVE-2026-109899WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerabilityMelapress Role Editor
- CVE-2026-114188WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityWPVibes AnyWhere Elementor
- CVE-2025-1837Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant CartridgeIBM watsonx Orchestrate Cartridge for Cloud Pak for Data
- CVE-2025-0166Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant CartridgeIBM watsonx Orchestrate Cartridge for Cloud Pak for Data
- CVE-2024-41786IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure RuleIBM Engineering Requirements Management DOORS Next
- CVE-2026-124553BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsingfunstory-ai BabelDOC
- CVE-2026-124552Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgiwebmin
- CVE-2026-124551ClassroomIO through 1.0.0 Cross-Organization Course Disclosure via Clone Endpointclassroomio
- CVE-2026-124474MRBS before 1.12.3 Reflected XSS via error parameter of view_entry.phpmeeting-room-booking-system mrbs-code
- CVE-2026-124465Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer PanicTrendyol kafka-konsumer
- CVE-2026-124331Jinher OA ProjectAfficheManage.aspx sql injectionJinher OA
- CVE-2026-124494SunEditor before 3.4.0 Stored XSS via : Entity Sanitizer BypassJiHong88 suneditor
- CVE-2026-124493SunEditor before 3.4.0 Stored XSS via DocumentType Header textContentJiHong88 suneditor
- CVE-2026-124492SunEditor before 3.4.0 Stored XSS via Link Modal Bookmark ListJiHong88 suneditor
- CVE-2026-124491SunEditor before 3.4.0 Stored XSS via FileUpload Plugin FilenameJiHong88 suneditor
- CVE-2026-124490OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocumentopenemr