[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108969 | 13 Oct 2026 | CVSS 7.3 | itsmeravitejak Online-Examination-SystemA security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted… | |
| CVE-2026-108968 | 13 Oct 2026 | CVSS 7.3 | SourceCodester Performance Indicator SystemA weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file… | |
| CVE-2026-108966 | 13 Oct 2026 | CVSS 7.3 | SourceCodester Performance Indicator SystemA vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file… | |
| CVE-2026-108967 | 13 Oct 2026 | CVSS 7.3 | SourceCodester Performance Indicator SystemA security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file… | |
| CVE-2026-109758 | 13 Oct 2026 | CVSS 9.3 | Perforce Helix Authentication ServicePerforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when… | |
| CVE-2026-108965 | 13 Oct 2026 | CVSS 7.3 | SourceCodester Performance Indicator SystemA vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file… | |
| CVE-2026-108962 | 13 Oct 2026 | CVSS 6.3 | storyicon comfyui_segment_anythingA vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the… | |
| CVE-2026-108964 | 13 Oct 2026 | CVSS 7.3 | SourceCodester Performance Indicator SystemA vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php… | |
| CVE-2026-108961 | 13 Oct 2026 | CVSS 6.3 | PaddlePaddle PaddleXA flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.__init__ of the file… | |
| CVE-2026-108957 | 13 Oct 2026 | CVSS 6.3 | TinyLLaVA_FactoryA security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the… | |
| CVE-2026-108958 | 13 Oct 2026 | CVSS 6.3 | TensorLayerA weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the… | |
| CVE-2026-108959 | 13 Oct 2026 | CVSS 6.3 | itsourcecode Online Cake Ordering SystemA security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file… | |
| CVE-2026-108960 | 13 Oct 2026 | CVSS 5.3 | Tiiny-AI PowerInferA vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function… | |
| CVE-2026-109786 | 13 Oct 2026 | CVSS 5.3 | fail2banIn fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on <token>" suffix after the host address… | |
| CVE-2026-82632 | 13 Oct 2026 | CVSS 3.1 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-84284 | 13 Oct 2026 | CVSS 5.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that… | |
| CVE-2026-85529 | 13 Oct 2026 | CVSS 5.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-92528 | 13 Oct 2026 | CVSS 4.2 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-92883 | 13 Oct 2026 | CVSS 8.7 | Critical Vulnerability in GitLab CE and EEGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-96893 | 13 Oct 2026 | CVSS 7.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-97229 | 13 Oct 2026 | CVSS 10.0 | Critical Vulnerability in GitLab CE and EEGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-9268 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-35001 | 13 Oct 2026 | CVSS 7.0 | OpenS100 Project OpenS100OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted… | |
| CVE-2026-5954 | 13 Oct 2026 | CVSS 4.2 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-6567 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-78335 | 13 Oct 2026 | CVSS 4.2 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-7767 | 13 Oct 2026 | CVSS 5.8 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that… | |
| CVE-2026-81839 | 13 Oct 2026 | CVSS 7.7 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-14210 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that… | |
| CVE-2026-14552 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-14814 | 13 Oct 2026 | CVSS 8.2 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… | |
| CVE-2026-16275 | 13 Oct 2026 | CVSS 5.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-16301 | 13 Oct 2026 | CVSS 8.5 | Critical Vulnerability in GitLab CE and EEGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-108947 | 13 Oct 2026 | CVSS 5.3 | yoshitomo-matsubara torchdistillA flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file… | |
| CVE-2026-108948 | 13 Oct 2026 | CVSS 5.4 | code-projects Online Reviewer SystemA vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file… | |
| CVE-2026-108954 | 13 Oct 2026 | CVSS 6.3 | k2-fsa sherpa-onnxA vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the… | |
| CVE-2026-108955 | 13 Oct 2026 | CVSS 5.3 | Tiiny-AI PowerInferA vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of… | |
| CVE-2026-108956 | 13 Oct 2026 | CVSS 7.3 | code-projects Online Reviewer SystemA vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file… | |
| CVE-2026-101168 | 13 Oct 2026 | CVSS 6.2 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-103549 | 13 Oct 2026 | CVSS 2.7 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-104661 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-105458 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-100755 | 13 Oct 2026 | CVSS 4.6 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-100104 | 13 Oct 2026 | CVSS 3.5 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-89122 | 13 Oct 2026 | CVSS 6.1 | SAP_SE SAP NetWeaver Enterprise PortalSAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a… | |
| CVE-2026-89124 | 13 Oct 2026 | CVSS 4.3 | SAP_SE SAP HANA (Display Product Catalog Based on Customs Declaration)Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality… | |
| CVE-2026-89112 | 13 Oct 2026 | CVSS 6.5 | SAP_SE CLA-AssistantThe admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target… | |
| CVE-2026-89113 | 13 Oct 2026 | CVSS 8.8 | SAP_SE SAP Commerce Cloud (OOTB Code)SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user… | |
| CVE-2026-89116 | 13 Oct 2026 | CVSS 5.9 | SAP_SE SAP yeoman-uiThe affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute… | |
| CVE-2026-89117 | 13 Oct 2026 | CVSS 6.1 | SAP_SE SAP NetWeaver Enterprise PortalSAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the… | |
| CVE-2026-89118 | 13 Oct 2026 | CVSS 5.3 | SAP_SE SAP NetWeaver Enterprise PortalSAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information… | |
| CVE-2026-89120 | 13 Oct 2026 | CVSS 7.1 | SAP_SE SAP ABAP PlatformA regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened… | |
| CVE-2026-89121 | 13 Oct 2026 | CVSS 4.7 | SAP_SE SAP S/4HANA (Linear Asset Management RAP Business Object)SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data… | |
| CVE-2026-87689 | 13 Oct 2026 | CVSS 9.8 | Rapid7 Metasploit FrameworkThe Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and… | |
| CVE-2026-89105 | 13 Oct 2026 | CVSS 4.2 | SAP_SE SAP/cloud-security-services-integration-libraryThe HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA… | |
| CVE-2026-89106 | 13 Oct 2026 | CVSS 4.4 | SAP_SE SAPUI5SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted… | |
| CVE-2026-89107 | 13 Oct 2026 | CVSS 9.9 | SAP_SE SAP S/4HANA (Manage Substitution/Validation Rules)SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a… | |
| CVE-2026-89108 | 13 Oct 2026 | CVSS 9.1 | SAP_SE SAP Manufacturing Integration and Intelligence (Configuration Service)SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An… | |
| CVE-2026-89110 | 13 Oct 2026 | CVSS 9.9 | SAP_SE SAP NetWeaver Visual ComposerSAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could… | |
| CVE-2026-89111 | 13 Oct 2026 | CVSS 10.0 | SAP_SE SAP CloudThe SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the… | |
| CVE-2026-58242 | 13 Oct 2026 | CVSS 3.5 | SAP_SE SAP Cloud ConnectorSAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted… | |
| CVE-2026-58249 | 13 Oct 2026 | CVSS 7.5 | SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component… | |
| CVE-2026-76972 | 13 Oct 2026 | CVSS 6.5 | SAP_SE SAP Manufacturing Integration and IntelligenceDue to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that… | |
| CVE-2026-76975 | 13 Oct 2026 | CVSS 6.1 | SAP_SE SAPUI5 (Support Assistant Overlay)Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly… | |
| CVE-2026-76976 | 13 Oct 2026 | CVSS 5.4 | SAP_SE SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain… | |
| CVE-2026-108942 | 13 Oct 2026 | CVSS 3.5 | philz1337x clarity-upscalerA security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function… | |
| CVE-2026-108943 | 13 Oct 2026 | CVSS 5.3 | ModelTC LightX2VA weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file… | |
| CVE-2026-108944 | 13 Oct 2026 | CVSS 4.8 | repository RAEA security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the… | |
| CVE-2026-108945 | 13 Oct 2026 | CVSS 5.3 | iMoonLab yolov13A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the… | |
| CVE-2026-96119 | 13 Oct 2026 | CVSS 9.9 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due… | Fix |
| CVE-2026-17487 | 13 Oct 2026 | CVSS 5.3 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on… | Fix |
| CVE-2026-18318 | 13 Oct 2026 | CVSS 5.3 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication. | Fix |
| CVE-2026-18343 | 13 Oct 2026 | CVSS 4.4 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization. | Fix |
| CVE-2026-19936 | 13 Oct 2026 | CVSS 4.8 | zephyrproject zephyrThe Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx… | |
| CVE-2026-19937 | 13 Oct 2026 | CVSS 5.7 | zephyrproject zephyrThe Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of… | |
| CVE-2026-19938 | 13 Oct 2026 | CVSS 5.9 | zephyrproject zephyrThe Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chan_send() in subsys/bluetooth/host/att.c documents… | |
| CVE-2026-81858 | 13 Oct 2026 | CVSS 8.1 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds… | Fix |
| CVE-2026-93886 | 13 Oct 2026 | CVSS 5.4 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied… | Fix |
| CVE-2026-108939 | 13 Oct 2026 | CVSS 5.3 | EricLBuehler mistral.rsA vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file… | |
| CVE-2026-108940 | 13 Oct 2026 | CVSS 6.5 | EricLBuehler Mistral.rsA vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file… | |
| CVE-2026-108941 | 13 Oct 2026 | CVSS 4.8 | Linketic CityGaussianA vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_cfg_args of the file internal/utils/common.py of… | |
| CVE-2026-17484 | 13 Oct 2026 | CVSS 5.5 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control. | Fix |
| CVE-2026-84418 | 12 Oct 2026 | CVSS 7.4 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and… | Fix |
| CVE-2026-85457 | 12 Oct 2026 | CVSS 8.1 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow. | |
| CVE-2026-92832 | 12 Oct 2026 | CVSS 5.1 | IBM Aspera Enterprise WebAppsIBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of… | |
| CVE-2026-93891 | 12 Oct 2026 | CVSS 7.6 | IBM TRIRIGA Application PlatformIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML… | |
| CVE-2026-93892 | 12 Oct 2026 | CVSS 8.1 | IBM TRIRIGA Application PlatformIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of… | |
| CVE-2026-82103 | 12 Oct 2026 | CVSS 6.5 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of… | Fix |
| CVE-2026-82108 | 12 Oct 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of… | Fix |
| CVE-2026-82110 | 12 Oct 2026 | CVSS 9.9 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of… | Fix |
| CVE-2026-82096 | 12 Oct 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization… | Fix |
| CVE-2026-82101 | 12 Oct 2026 | CVSS 9.6 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal… | Fix |
| CVE-2026-75782 | 12 Oct 2026 | CVSS 7.8 | IBM Aspera Enterprise WebAppsIBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment… | |
| CVE-2026-75061 | 12 Oct 2026 | CVSS 7.5 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted… | Fix |
| CVE-2026-75063 | 12 Oct 2026 | CVSS 5.4 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding. | Fix |
| CVE-2026-75076 | 12 Oct 2026 | CVSS 4.3 | IBM Aspera Enterprise WebAppsIBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript… | |
| CVE-2026-75095 | 12 Oct 2026 | CVSS 7.5 | IBM Aspera Enterprise WebAppsIBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. | |
| CVE-2026-75621 | 12 Oct 2026 | CVSS 6.2 | IBM Aspera Enterprise WebAppsIBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned… | |
| CVE-2026-19622 | 12 Oct 2026 | CVSS 9.8 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of… | Fix |
| CVE-2026-19627 | 12 Oct 2026 | CVSS 8.2 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to… | Fix |
Page 82 of 168