Export limit exceeded: 380467 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (470 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-16480 1 Ibm 1 Db2 2026-08-18 4.3 Medium
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.
CVE-2026-10543 1 Ibm 1 Db2 2026-08-18 8.2 High
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query.
CVE-2026-17227 1 Ibm 1 Db2 Mirror For I 2026-08-18 5.4 Medium
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command.
CVE-2026-17181 1 Ibm 1 Db2 Mirror For I 2026-08-18 9.3 Critical
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal.
CVE-2026-17081 1 Ibm 1 Db2 Mirror For I 2026-08-18 8.2 High
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory.
CVE-2026-16708 1 Ibm 1 Db2 Mirror For I 2026-08-18 8.3 High
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration.
CVE-2026-17209 1 Ibm 1 Db2 Mirror For I 2026-08-17 6.3 Medium
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting.
CVE-2026-17079 1 Ibm 1 Db2 Mirror For I 2026-08-17 6.3 Medium
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter.
CVE-2026-17179 1 Ibm 1 Db2 Mirror For I 2026-08-17 8.5 High
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection.
CVE-2026-17173 1 Ibm 1 Db2 Mirror For I 2026-08-17 6.5 Medium
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths.
CVE-2026-18097 1 Ibm 1 Db2 2026-08-17 5.5 Medium
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.
CVE-2026-18554 1 Ibm 1 Db2 Mirror For I 2026-08-17 7.5 High
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVE-2026-18178 1 Ibm 1 Db2 Mirror For I 2026-08-17 5.4 Medium
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.
CVE-2026-17184 1 Ibm 1 Db2 Mirror For I 2026-08-17 9.8 Critical
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path.
CVE-2026-17175 1 Ibm 1 Db2 Mirror For I 2026-08-17 7.5 High
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement.
CVE-2026-16905 1 Ibm 1 Db2 Mirror For I 2026-08-17 5.3 Medium
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication.
CVE-2026-18096 1 Ibm 1 Db2 2026-08-17 3.3 Low
IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak.
CVE-2026-10534 1 Ibm 1 Db2 2026-08-17 8.4 High
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.
CVE-2026-17186 1 Ibm 1 Db2 Mirror For I 2026-08-14 9.9 Critical
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command.
CVE-2026-17182 1 Ibm 1 Db2 Mirror For I 2026-08-14 9.8 Critical
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments.