Menu

Star on GitHub · 3.5k

2026

90,429 vulnerabilities published in 2026.

Results

90,429· Page 447/1809
8.9
CVE-2026-84070

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

9.9
CVE-2026-84064

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to i

7.4
CVE-2026-84036

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to imp

8.8
CVE-2026-84034

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore

9.0
CVE-2026-84031

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

9.8
CVE-2026-82967

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attack

7.6
CVE-2026-82896

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due

7.8
CVE-2026-82893

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man

8.1
CVE-2026-82892

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutraliza

5.9
CVE-2026-82890

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due t

8.8
CVE-2026-82887

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to impro

8.8
CVE-2026-82885

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing

9.6
CVE-2026-82832

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

9.8
CVE-2026-82340

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled refl

7.2
CVE-2026-81937

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file

8.8
CVE-2026-81933

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A

7.2
CVE-2026-81669

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI comm

9.8
CVE-2026-81657

IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system

8.8
CVE-2026-81656

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor

8.6
CVE-2026-81626

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component.

6.3
CVE-2026-81623

IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileg

9.9
CVE-2026-80442

IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCert

9.8
CVE-2026-80441

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the ge

5.3
CVE-2026-77528

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, We

5.0
CVE-2026-76902

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior t

5.8
CVE-2026-76901

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior t

6.8
CVE-2026-76900

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. In vers

5.7
CVE-2026-76899

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. From 1.

7.5
CVE-2026-75895

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker

9.1
CVE-2026-75878

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated sessio

N/A
CVE-2026-63647

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior t

N/A
CVE-2026-63646

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior t

6.5
CVE-2026-61822

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance() ha

8.5
CVE-2026-61821

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, drop_partition_id()

8.5
CVE-2026-61820

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherit_template_pro

8.5
CVE-2026-61819

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, when pg_jobmon is in

8.5
CVE-2026-61818

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() rea

8.5
CVE-2026-61817

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance(), s

9.9
CVE-2026-61781

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, create_partition_tim

6.8
CVE-2026-61723

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS par

6.8
CVE-2026-61722

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS par

8.0
CVE-2026-61721

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loa

6.2
CVE-2026-61720

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser com

7.8
CVE-2026-61714

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.

9.8
CVE-2026-58264

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6, the FluidSynth com

3.7
CVE-2026-57226

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

6.5
CVE-2026-57224

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr

5.3
CVE-2026-57222

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

5.3
CVE-2026-52745

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior t

6.4
CVE-2026-18869

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access inte

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

CyberStrike v2 is here — more intelligence, greater reach