Search
320 CVEs · published 2026-11-08 to 2026-11-08
CVEs (320)
Showing 51–75 of 320
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-15266 | CRITICAL | 9.8 | 2026-11-08 | IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host. | |
| CVE-2026-14963 | MEDIUM | 4.3 | 2026-11-08 | IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to execute unauthorized processes due to cross-site request forgery. | |
| CVE-2026-14469 | MEDIUM | 5.4 | 2026-11-08 | IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow an authenticated attacker to access and manipulate filesets beyond their control due to improper authorization. | |
| CVE-2026-14437 | MEDIUM | 6.5 | 2026-11-08 | IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL re… | |
| CVE-2026-14435 | MEDIUM | 5.9 | 2026-11-08 | IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive… | |
| CVE-2026-14434 | MEDIUM | 5.9 | 2026-11-08 | IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive… | |
| CVE-2026-14377 | MEDIUM | 5.4 | 2026-11-08 | IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requ… | |
| CVE-2026-14375 | MEDIUM | 5.9 | 2026-11-08 | IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.1.0 does not validate or improperly validates TLS certificate validation when communicating with remote cluster GUI inter… | |
| CVE-2026-12737 | MEDIUM | 4.4 | 2026-11-08 | IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.1_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.1_1 stores potentially sensitive information in log files that cou… | |
| CVE-2026-12735 | MEDIUM | 4.3 | 2026-11-08 | IBM Controller Disclosure Management 1.0.0.0 could allow an attacker to obtain sensitive EXIF metadata from uploaded images due to improper removal of sensitive information… | |
| CVE-2026-120115 | MEDIUM | 6.3 | 2026-11-08 | IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification across all REST API endpoints. An attacker who convinces a user to visit a malicio… | |
| CVE-2026-120113 | MEDIUM | 6.4 | 2026-11-08 | IBM Aspera Connect 1.6.1 through 4.2.19 could allow a remote attacker to obtain sensitive information and modify host trust configuration due to missing authentication and … | |
| CVE-2026-11547 | MEDIUM | 4.3 | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by a server-side request forgery vulnerability in the Admin Center deploy validation endpoint. | |
| CVE-2026-119670 | MEDIUM | 6.3 | 2026-11-08 | IBM Storage Copy Data Management 2.2 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of… | |
| CVE-2026-117545 | HIGH | 8.8 | 2026-11-08 | IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. | |
| CVE-2026-116501 | HIGH | 8.4 | 2026-11-08 | IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write caused by improper input validation when accessing a… | |
| CVE-2026-116500 | MEDIUM | 6.2 | 2026-11-08 | IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to cause a denial of service due to unbound recursion during deserialization of untrusted QPY payloads. | |
| CVE-2026-116499 | HIGH | 8.4 | 2026-11-08 | IBM Qiskit SDK 1.4.2 through 2.6.2 could allow a local attacker to execute arbitrary code due to deserialization of untrusted data. | |
| CVE-2026-115554 | MEDIUM | 6.4 | 2026-11-08 | IBM Tivoli Netcool/OMNIbus 8.1.0 through 8.1.0.41 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScrip… | |
| CVE-2026-114464 | CRITICAL | 9.3 | 2026-11-08 | IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control. | |
| CVE-2026-113698 | MEDIUM | 6.5 | 2026-11-08 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table. | |
| CVE-2026-112369 | MEDIUM | 4.3 | 2026-11-08 | IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms. | |
| CVE-2026-110273 | HIGH | 8.8 | 2026-11-08 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.9 IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of spe… | |
| CVE-2026-10844 | MEDIUM | 4.3 | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow a remote attacker to conduct phishing attacks. | |
| CVE-2026-108292 | MEDIUM | 5.5 | 2026-11-08 | IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened. |