CVE-2026-68883

A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network. This vulnerability could allow malicious actors to cause a denial-of-service attack, gain excessive privileges, execute arbitrary code, and potentially access sensitive data. M...

EUVD-2026-100709

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-83945

A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to execute arbitrary code over a network. This vulnerability could lead to a denial-of-service attack, privilege escalation, or unauthorized access to sensitive data. Microsoft has released updates to...

EUVD-2026-100708

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67625

A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to execute arbitrary code over a network. The vulnerability could also lead to a denial-of-service attack, excessive privilege gain, and unauthorized access to sensitive data. Microsoft has released u...

EUVD-2026-100707

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-96956

A stack-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network. While the provided documents do not specify the exact component or file involved, the vulnerability could lead to arbitrary code execution, denial-of-service, or unauthorized ...

CVE-2026-93905

IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are vulnerable to a deserialization of untrusted data (CWE-502) when the batchManagement-1.0 feature is enabled. This vulnerability could allow an unauthenticated remote attacker to corrupt the persisted status of batch ...

CVE-2026-93905 IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances...

CVE-2026-93909

IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are vulnerable to an authentication bypass vulnerability when the samlWeb-2.0 feature is enabled. This issue is associated with CWE-384 (Session Fixation) and carries a CVSS 3.1 base score of 9.1 (CRITICAL) . The vulnera...

CVE-2026-93909 IBM WebSphere Application Server Liberty is affected by an authentication bypass

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled...

CVE-2026-93895

IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 are vulnerable to an Improper Access Control flaw (CWE-284 ). When the grpc-1.0 feature is enabled, an unauthenticated remote attacker can bypass access controls configured on gRPC service methods . This vulnerability...

CVE-2026-93895 IBM WebSphere Application Server Liberty Improper Access Control

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods...

CVE-2026-95695

IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 are vulnerable to a security bypass due to incorrect authorization (CWE-863). This issue specifically affects environments with the grpc-1.0 feature enabled, potentially allowing a remote attacker to bypass security r...

CVE-2026-95695 IBM WebSphere Application Server Liberty Incorrect Authorization

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization...

CVE-2026-95696

IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 are vulnerable to a denial of service (DoS) attack. The root cause is an uncaught exception triggered by uncontrolled resource consumption (CWE-400) when the grpc-1.0 feature is enabled. A remote attacker can exploit ...

CVE-2026-95696 IBM WebSphere Application Server Liberty Denial of Service

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception...

CVE-2026-56826

Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only accesssetting could directly invoke destructive actions through the Livewire endpoint because...

CVE-2026-101294 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature...

CVE-2026-101294

IBM WebSphere Application Server and WebSphere Application Server Liberty are impacted by a missing cryptographic step vulnerability (CWE-325 ). The root cause is the improper verification of cryptographic signatures , which could allow a remote attacker to bypass signature verification. Affected...