VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

CriticalHighMediumLowExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

ibmoraclegoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

ibm products

websphere application server 499db2 350vios 233sterling b2b integrator 203rational quality manager 201qradar security information and event manager 192infosphere information server 189maximo asset management 182rational doors next generation 153rational team concert 142rational collaborative lifecycle management 141rational engineering lifecycle manager

403,580 vulnerabilities · 1,767 actively exploited (CISA KEV)

ibm ✕Clear filters

8,320 results

ID	Severity	Summary	Published
CVE-2026-18178	HIGH8.1	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.	14/08/2026
CVE-2026-17227	MEDIUM6.5	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command.	14/08/2026
CVE-2026-17209	MEDIUM5.4	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting.	14/08/2026
CVE-2026-17186	CRITICAL9.8	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command.