| CVE-2026-19133 | HIGH | 8.1 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform una… | 2026-11-08 |
| CVE-2026-19307 | MEDIUM | 4.3 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1, and IBM Sterling File Gat… | 2026-11-08 |
| CVE-2026-2477 | MEDIUM | 6.5 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to… | 2026-11-08 |
| CVE-2026-2700 | MEDIUM | 4.3 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows l… | 2026-11-08 |
| CVE-2026-3684 | MEDIUM | 6.5 | IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through - 11.3.1.2 Interim Fix 002 could allow a user w… | 2026-11-08 |
| CVE-2026-6715 | CRITICAL | 9.8 | IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an opera… | 2026-11-08 |
| CVE-2026-75879 | MEDIUM | 4.3 | IBM Content Navigator 3.0.15.0, 26.0.0.0, 3.1.0.0, and 3.2.0.0 is vulnerable to LDAP injection. A remote authe… | 2026-11-08 |
| CVE-2026-77153 | MEDIUM | 4.8 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information fro… | 2026-11-08 |
| CVE-2026-78537 | MEDIUM | 6.8 | IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain… | 2026-11-08 |
| CVE-2026-78636 | MEDIUM | 4.3 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure v… | 2026-11-08 |
| CVE-2026-80435 | MEDIUM | 5.0 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in… | 2026-11-08 |
| CVE-2026-81209 | MEDIUM | 4.9 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 and IBM Sterling File Gateway 6.2.1… | 2026-11-08 |
| CVE-2026-81542 | MEDIUM | 6.4 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to delete arbitrary fi… | 2026-11-08 |
| CVE-2026-82830 | MEDIUM | 6.7 | IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands … | 2026-11-08 |
| CVE-2026-84030 | MEDIUM | 5.6 | IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to imp… | 2026-11-08 |
| CVE-2026-84228 | LOW | 3.1 | IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive informatio… | 2026-11-08 |
| CVE-2026-84229 | MEDIUM | 6.5 | IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to impro… | 2026-11-08 |
| CVE-2026-84237 | LOW | 3.1 | IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive informatio… | 2026-11-08 |
| CVE-2026-8639 | HIGH | 8.8 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session f… | 2026-11-08 |
| CVE-2026-8640 | LOW | 3.5 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 does not set the SameSite … | 2026-11-08 |
| CVE-2026-8642 | MEDIUM | 4.3 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints th… | 2026-11-08 |
| CVE-2026-8860 | MEDIUM | 6.5 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for a… | 2026-11-08 |
| CVE-2026-93005 | MEDIUM | 6.5 | IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service thro… | 2026-11-08 |
| CVE-2026-93879 | HIGH | 7.5 | Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource co… | 2026-11-08 |
| CVE-2026-97677 | HIGH | 8.1 | IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file conten… | 2026-11-08 |
| CVE-2026-9764 | HIGH | 8.8 | IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the i… | 2026-11-08 |
| CVE-2026-118904 | HIGH | 8.1 | IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrict… | 2026-11-08 |
| CVE-2026-16682 | MEDIUM | 6.5 | IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.… | 2026-11-08 |
| CVE-2026-16697 | MEDIUM | 6.5 | IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, … | 2026-11-08 |
| CVE-2026-17426 | MEDIUM | 6.5 | IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of serv… | 2026-11-08 |
| CVE-2026-17427 | MEDIUM | 6.5 | IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, … | 2026-11-08 |
| CVE-2026-95867 | MEDIUM | 6.7 | IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrar… | 2026-11-08 |
| CVE-2026-96146 | HIGH | 7.5 | IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial … | 2026-11-08 |
| CVE-2026-124498 | LOW | 3.5 | A vulnerability was determined in Convene Azeus Convene Board Management Portal 7.0.2.7_3 p72. The impacted el… | 2026-11-08 |
| CVE-2026-71881 | NA | N/A | Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolkit versions before 3.… | 2026-11-07 |
| CVE-2026-104913 | HIGH | 8.8 | The Interactive Real Estate – Floor Plan & Building Visualizer plugin for WordPress is vulnerable to Arbitrary… | 2026-11-07 |
| CVE-2026-115816 | MEDIUM | 6.4 | The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment (… | 2026-11-07 |
| CVE-2026-116562 | MEDIUM | 6.4 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Si… | 2026-11-07 |
| CVE-2026-118046 | MEDIUM | 6.4 | The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to Stored DOM-Base… | 2026-11-07 |
| CVE-2026-118054 | MEDIUM | 6.4 | The LearnPress – Course Review plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via… | 2026-11-07 |
| CVE-2026-118067 | MEDIUM | 5.4 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable … | 2026-11-07 |
| CVE-2026-119070 | HIGH | 7.2 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPre… | 2026-11-07 |
| CVE-2026-119098 | MEDIUM | 6.4 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Stored C… | 2026-11-07 |
| CVE-2026-119152 | MEDIUM | 5.4 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulne… | 2026-11-07 |
| CVE-2026-119165 | MEDIUM | 6.4 | The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_n… | 2026-11-07 |
| CVE-2026-119175 | HIGH | 7.2 | The Flying Images: Optimize and Lazy Load Images for Faster Page Speed plugin for WordPress is vulnerable to S… | 2026-11-07 |
| CVE-2026-119213 | LOW | 3.7 | The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to unauthent… | 2026-11-07 |
| CVE-2026-119218 | MEDIUM | 5.4 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-Based Cros… | 2026-11-07 |
| CVE-2026-119219 | MEDIUM | 5.4 | The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fields[| 2026-11-07 | |
| CVE-2026-119616 | MEDIUM | 5.9 | The Noptin – Newsletter, New Post Notifications & Email Automation plugin for WordPress is vulnerable to Local… | 2026-11-07 |