VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

CriticoAltoMedioBassoExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

ibmoraclegoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

ibm products

websphere application server 499db2 350vios 233sterling b2b integrator 203rational quality manager 201qradar security information and event manager 192infosphere information server 189maximo asset management 182rational doors next generation 153rational team concert 142rational collaborative lifecycle management 141rational engineering lifecycle manager

402.603 vulnerabilities · 1766 actively exploited (CISA KEV)

ibm ✕Clear filters

8305 results

ID	Severity	Summary	Published
CVE-2026-85542	ALTO8.8	IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution with elevated privileg	25/09/2026
CVE-2026-85029	ALTO8.8	IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory.	25/09/2026
CVE-2026-84893	MEDIO6.5	IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.