Lucene search
+L

92119 matches found

Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•10 views

PT-2026-92147

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...

7.5CVSS5.7AI score0.00161EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•12 views

PT-2026-92143

IBM Verify Identity Access containers may not apply management password change operations correctly...

5.7AI score0.00232EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•14 views

PT-2026-92152

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code on the application server due to...

7.5CVSS6.6AI score0.00329EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•15 views

PT-2026-92144

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

7.5CVSS5.8AI score0.00313EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•13 views

PT-2026-92160

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.4CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•13 views

PT-2026-92157

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code due to a deserialization of untrusted...

8.8CVSS6.5AI score0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•9 views

PT-2026-92150

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker with a trusted TLS client certificate to cause a denial of service and...

7CVSS5.8AI score0.00168EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•1 views

CVE-2026-11927: Improper Neutralization of Special Elements in Output Used by a Downstream Component

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services...

6.5CVSS5.8AI score0.00171EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•13 views

PT-2026-92161

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

5.4CVSS5.8AI score0.00197EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/14 10:16 p.m.•13 views

CVE-2026-13265

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker with MFT publish authority to obtain sensitive information or...

6.8CVSS0.00223EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/14 10:16 p.m.•11 views

CVE-2026-12758

IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers...

5.4CVSS0.00182EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/14 10:16 p.m.•15 views

CVE-2026-12756

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

7.1CVSS0.00293EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/14 10:16 p.m.•22 views

CVE-2026-12944

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...

9.6CVSS0.00393EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/14 10:16 p.m.•13 views

CVE-2026-12759

IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption...

6.5CVSS0.00219EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/14 9:39 p.m.•10 views

Security Bulletin: IBM DataPower Gateway affected by multiple vulnerabilities in GLib

Summary Multiple vulnerabilities were addressed in IBM DataPower Gateway version 11.0.0.2 Vulnerability Details CVEID:CVE-2025-14087 DESCRIPTION: A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential...

9.8CVSS6.9AI score0.00826EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/14 9:35 p.m.•12 views

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities in Python.

Summary IBM Virtualization Engine TS7700 is susceptible to two Tampering conditions and one potential Elevation of Privilege issue due to the use of Python CVE-2025-0938, CVE-2025-47273, CVE-2025-1795. TS7700 uses Python to perform operations with the Cloud and internal system configuration tasks...

8.8CVSS8.1AI score0.01556EPSS
SaveExploits5Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/14 9:33 p.m.•26 views

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities in Python.

Summary IBM Virtualization Engine TS7700 is susceptible to four denial-of-service conditions due to the use of Python CVE-2024-7592, CVE-2024-8088, CVE-2024-0450, CVE-2024-6232, one elevation of privilege CVE-2024-6345, two tampering CVE-2024-4032, CVE-2024-6923, one information disclosure...

8.8CVSS7.4AI score0.02303EPSS
SaveExploits5Affected Software2
Vulnrichment
Vulnrichment
•added 2026/09/14 9:30 p.m.•13 views

CVE-2026-12944 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...

9.6CVSS6.3AI score0.00393EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/14 9:17 p.m.•9 views

CVE-2026-7884

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malicious JavaScript code. When an administrator later accesses the user account management panel and views that user's permissions, the...

5.4CVSS0.00226EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/14 9:17 p.m.•8 views

CVE-2026-78415

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup...

5.4CVSS0.00306EPSS
SaveExploits0References1
Rows per page
Query Builder