Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.31%Mar 25, 2026
- Medium4.3IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability.Check if you run itEPSS 0.25%Mar 25, 2026
- Medium5.4IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.22%Mar 25, 2026
- Medium6.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of sensitive information via JSON server response manipulation.Check if you run itEPSS 0.22%Mar 25, 2026
- Medium5.9IBM Concert 1.0.0 through 2.2.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.Check if you run itEPSS 0.19%Mar 25, 2026
- High7.5IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informationCheck if you run itEPSS 0.21%Mar 25, 2026
- Medium5.5IBM Concert 1.0.0 through 2.2.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources.Check if you run itEPSS 0.18%Mar 25, 2026
- Medium5.5IBM Concert 1.0.0 through 2.2.0 could allow a local user to obtain sensitive information due to missing function level access control.Check if you run itEPSS 0.16%Mar 25, 2026
- Medium5.5IBM Concert 1.0.0 through 2.2.0 could allow a privileged user to perform unauthorized actions due to improper restriction of channel communication to intended endpoints.Check if you run itEPSS 0.13%Mar 25, 2026
- Medium4.3IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 IBM InfoSphere DataStage Flow Designer is vulnerable to cross-site request forgery which could allow an att…Check if you run itEPSS 0.15%Mar 25, 2026
- Medium5.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 product stores user credentials and other sensitive information in plain text which can be read by a local user.Check if you run itEPSS 0.16%Mar 25, 2026
- High7.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable due to Insecure Direct Object Reference (IDOR).Check if you run itEPSS 0.33%Mar 25, 2026
- Critical9.8IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when administ…Check if you run itEPSS 0.43%Mar 25, 2026
- High7.2IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by privilege escalation.Check if you run itEPSS 0.59%Mar 25, 2026
- Medium5.4IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.23%Mar 25, 2026
- Medium6.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 does not invalidate a session after privileges have been modified which could allow an authenticated user t…Check if you run itEPSS 0.26%Mar 25, 2026
- Low3.1IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to proc…Check if you run itEPSS 0.24%Mar 25, 2026
- Medium6.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.Check if you run itEPSS 0.24%Mar 25, 2026
- Medium5.4NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Check if you run itEPSS 0.15%Mar 25, 2026
- Critical9.8An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c componentCheck if you run itEPSS 0.51%Mar 25, 2026
- Medium6.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information due to insufficiently protected credentials.Check if you run itEPSS 0.22%Mar 25, 2026
- Medium5.5IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user.Check if you run itEPSS 0.10%Mar 25, 2026
- High7.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Check if you run itEPSS 0.44%Mar 25, 2026
- High7.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Check if you run itEPSS 0.56%Mar 25, 2026
- High7.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Check if you run itEPSS 0.64%Mar 25, 2026
Sort