Search
143 CVEs · published 2026-11-08 to 2026-11-08, Medium severity
CVEs (143)
Showing 1–25 of 143
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-95867 | MEDIUM | 6.7 | 2026-11-08 | IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow. | |
| CVE-2026-17427 | MEDIUM | 6.5 | 2026-11-08 | IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to… | |
| CVE-2026-17426 | MEDIUM | 6.5 | 2026-11-08 | IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception. | |
| CVE-2026-16697 | MEDIUM | 6.5 | 2026-11-08 | IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker t… | |
| CVE-2026-16682 | MEDIUM | 6.5 | 2026-11-08 | IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and … | |
| CVE-2026-93005 | MEDIUM | 6.5 | 2026-11-08 | IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through insufficient rate limiting of email notifications, resulti… | |
| CVE-2026-8860 | MEDIUM | 6.5 | 2026-11-08 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parame… | |
| CVE-2026-8642 | MEDIUM | 4.3 | 2026-11-08 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that disclose system information including server versions and s… | |
| CVE-2026-84229 | MEDIUM | 6.5 | 2026-11-08 | IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests. | |
| CVE-2026-84030 | MEDIUM | 5.6 | 2026-11-08 | IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command. | |
| CVE-2026-82830 | MEDIUM | 6.7 | 2026-11-08 | IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of argument delimiters. | |
| CVE-2026-81542 | MEDIUM | 6.4 | 2026-11-08 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to delete arbitrary files due to path traversal. | |
| CVE-2026-81209 | MEDIUM | 4.9 | 2026-11-08 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 Standard Edition cou… | |
| CVE-2026-80435 | MEDIUM | 5.0 | 2026-11-08 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw. | |
| CVE-2026-78636 | MEDIUM | 4.3 | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in the JMX REST co… | |
| CVE-2026-78537 | MEDIUM | 6.8 | 2026-11-08 | IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic … | |
| CVE-2026-77153 | MEDIUM | 4.8 | 2026-11-08 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information from the Host-Based Printer Subsystem due to no authorization che… | |
| CVE-2026-75879 | MEDIUM | 4.3 | 2026-11-08 | IBM Content Navigator 3.0.15.0, 26.0.0.0, 3.1.0.0, and 3.2.0.0 is vulnerable to LDAP injection. A remote authenticated attacker could send a specially crafted request that … | |
| CVE-2026-3684 | MEDIUM | 6.5 | 2026-11-08 | IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through - 11.3.1.2 Interim Fix 002 could allow a user with administrative privileges to read and write arbitrary file… | |
| CVE-2026-2700 | MEDIUM | 4.3 | 2026-11-08 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows low-privileged users to execute administrative functions by dir… | |
| CVE-2026-2477 | MEDIUM | 6.5 | 2026-11-08 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to enforce backend authorization checks, allowing low‑privileged… | |
| CVE-2026-19307 | MEDIUM | 4.3 | 2026-11-08 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1 S… | |
| CVE-2026-76052 | MEDIUM | 6.0 | 2026-11-08 | IBM Storage Scale System 6.2.3.0 through 6.2.3.6, and 7.0.0.0 through 7.0.1.0 and IBM Storage Scale 6.0.0.0 through 6.0.1.0, and 5.2.3.0 through 5.2.3.8 could allow an atta… | |
| CVE-2026-18668 | MEDIUM | 6.5 | 2026-11-08 | IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 - 6.2.2.1_1 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration. | |
| CVE-2026-18546 | MEDIUM | 5.4 | 2026-11-08 | IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to server-side request forgery (SSRF). This m… |