Export limit exceeded: 390308 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 35), (line:1, col:36)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (390308 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-16177 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 5.3 Medium
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16178 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 7.5 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation.
CVE-2026-16179 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 7.5 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a heap buffer underwrite and potentially crash the service.
CVE-2026-16181 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 7.4 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass security restrictions due to improper authorization.
CVE-2026-16182 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 5.9 Medium
IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing.
CVE-2026-16340 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 9.8 Critical
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write in the RFC2047 encoded-word parser.
CVE-2026-14991 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 9.8 Critical
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
CVE-2026-15762 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 9.8 Critical
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.
CVE-2026-15781 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 8 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-15784 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 8.1 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.
CVE-2026-106396 1 Google 2 Android, Chrome 2026-10-15 5.4 Medium
Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-15819 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 7.5 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator.
CVE-2026-15822 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 7.5 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper memoization of GraphQL fragment spreads.
CVE-2026-15824 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 8.2 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.
CVE-2026-16111 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 7.5 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw.
CVE-2026-16159 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 8.6 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.
CVE-2026-16161 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 7.5 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVE-2026-16163 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 8.6 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write.
CVE-2026-110810 1 Ggml-org 1 Whisper.cpp 2026-10-15 2.8 Low
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. Upgrading to version 1.9.5 is able to mitigate this issue. The patch is named 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
CVE-2026-16164 1 Ibm 5 Datapower Gateway, Datapower Gateway 1050, Datapower Gateway 1060 and 2 more 2026-10-15 7.5 High
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.