VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

CríticoAltoMedioBajoExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

ibmoraclegoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

ibm products

websphere application server 499db2 350vios 233sterling b2b integrator 203rational quality manager 201qradar security information and event manager 192infosphere information server 189maximo asset management 182rational doors next generation 153rational team concert 142rational collaborative lifecycle management 141rational engineering lifecycle manager

403.038 vulnerabilities · 1766 actively exploited (CISA KEV)

ibm ✕Clear filters

8320 results

ID	Severity	Summary	Published
CVE-2026-16169	ALTO7.5	IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.	08/10/2026
CVE-2026-14521	MEDIO4.9	IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or fa	08/10/2026
CVE-2026-84842	ALTO8.1	IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity.