Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (237 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-90911 1 Ibm 1 Maximo Ai Service 2026-10-12 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-90912 1 Ibm 1 Maximo Ai Service 2026-10-12 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
CVE-2026-90920 1 Ibm 1 Maximo Ai Service 2026-10-12 9.8 Critical
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
CVE-2026-90921 1 Ibm 1 Maximo Ai Service 2026-10-12 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
CVE-2026-92876 1 Ibm 1 Maximo Application Suite Iot Component 2026-10-12 7.5 High
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
CVE-2026-105052 1 Ibm 1 Maximo Application Suite 2026-10-12 7.5 High
IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
CVE-2026-78673 1 Ibm 1 Maximo Ai Service 2026-10-12 7.5 High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
CVE-2026-75881 1 Ibm 1 Maximo Application Suite Iot Component 2026-10-12 7.5 High
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.
CVE-2026-18537 1 Ibm 1 Maximo Application Suite Location Service For Esri Component 2026-10-12 8.7 High
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template.
CVE-2026-18533 1 Ibm 1 Maximo Application Suite Location Service For Esri Component 2026-10-12 6.5 Medium
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template.
CVE-2026-18529 1 Ibm 1 Maximo Application Suite Location Service For Esri Component 2026-10-12 8.7 High
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.
CVE-2026-18517 1 Ibm 1 Maximo Application Suite Location Service For Esri Component 2026-10-12 7.7 High
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy.
CVE-2026-18513 1 Ibm 1 Maximo Application Suite Location Service For Esri Component 2026-10-12 7.2 High
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.
CVE-2026-18531 1 Ibm 1 Maximo Application Suite 2026-08-06 5.3 Medium
IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.
CVE-2026-15656 1 Ibm 1 Maximo Application Suite 2026-08-05 4.3 Medium
IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
CVE-2008-3161 1 Ibm 1 Maximo 2026-04-23 N/A
Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Accept, (2) Accept-Language, (3) UA-CPU, (4) Accept-Encoding, (5) User-Agent, or (6) Cookie HTTP header. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2026-4820 1 Ibm 1 Maximo Application Suite 2026-04-08 4.3 Medium
IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
CVE-2025-14684 1 Ibm 3 Maximo Application Suite, Maximo Application Suite - Monitor Component, Maximo Application Suite Monitor Component 2026-04-02 4 Medium
IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.
CVE-2025-2898 1 Ibm 1 Maximo Application Suite 2026-02-26 7.5 High
IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control (RBAC) configurations.
CVE-2025-36386 1 Ibm 1 Maximo Application Suite 2025-11-21 9.8 Critical
IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.