Skip to content
COOEY
LIVE FEED
674 events · 4 sources · newest first
Events in view
674
all sources
Critical
0
severity
Active sources
4
collectors
Last sync
2026-10-16 02:00
UTC
All data Vulns · 5346Regulatory · 151News · 1570 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 3347CISA KEV · 1747CISA advisory · 233DC3 DCISE · 19
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2026-10-12 NVD CVE
CVE-2026-19622: IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass auth HIGH
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.
2026-10-09 NVD CVE
CVE-2026-76779: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, HIGH
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access...
2026-10-08 NVD CVE
CVE-2026-82344: IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer ove HIGH
IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login...
2026-10-08 NVD CVE
CVE-2026-82900: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to d HIGH
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.
2026-10-08 NVD CVE
CVE-2026-84246: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
2026-10-08 NVD CVE
CVE-2026-82335: IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buff HIGH
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an...
2026-10-08 NVD CVE
CVE-2026-82334: IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out- HIGH
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid...
2026-10-08 NVD CVE
CVE-2026-84209: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to e HIGH
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
2026-10-08 NVD CVE
CVE-2026-84057: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to e HIGH
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
2026-10-08 NVD CVE
CVE-2026-84058: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer over HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to...
2026-10-08 NVD CVE
CVE-2026-84198: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
2026-10-08 NVD CVE
CVE-2026-14888: IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0. HIGH
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.
2026-10-08 NVD CVE
CVE-2026-81932: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or...
2026-10-08 NVD CVE
CVE-2026-84035: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
2026-10-08 NVD CVE
CVE-2026-82895: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
2026-10-07 NVD CVE
CVE-2026-93675: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute a HIGH
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion.
2026-10-06 NVD CVE
CVE-2026-82162: Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper HIGH
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...
2026-10-06 NVD CVE
CVE-2026-106218: In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leadin HIGH
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible
2026-09-30 NVD CVE
CVE-2026-100273: In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts de HIGH
In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution
2026-09-30 NVD CVE
CVE-2026-100277: In JetBrains YouTrack before 2026.2.19197 account takeover was possible by repla HIGH
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature
2026-09-30 NVD CVE
CVE-2026-103109: Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper in HIGH
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a...
2026-09-30 NVD CVE
CVE-2026-100255: In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account HIGH
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset
2026-09-29 NVD CVE
CVE-2026-102827: simple-git, an interface for running git commands in any node.js application, en HIGH
simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsafeOperationsPlugin compares parsed...
2026-09-29 NVD CVE
CVE-2026-102676: Electron is a framework for writing cross-platform desktop applications using Ja HIGH
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron <webview> guest could enable...
2026-09-28 NVD CVE
CVE-2026-102267: PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, P HIGH
PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS trust boundary. This occurs when a...
2026-09-28 NVD CVE
CVE-2026-102266: PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until HIGH
PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.from_jwk is affected because PyJWK verification path used the decoded key without applying prepare_key validation....
2026-09-22 NVD CVE
CVE-2026-65118: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att HIGH
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data...
2026-09-22 NVD CVE
CVE-2026-65114: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att HIGH
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to data...
2026-09-22 NVD CVE
CVE-2026-17618: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot HIGH
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.
2026-09-22 NVD CVE
CVE-2026-65130: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att HIGH
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial...
2026-09-22 NVD CVE
CVE-2026-65121: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an at HIGH
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability might lead to escalation of privileges,...
2026-09-18 NVD CVE
CVE-2026-57228: Suricata is a network Intrusion Detection System, Intrusion Prevention System an HIGH
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can...
2026-09-18 NVD CVE
CVE-2026-10027: IBM MQ could allow a remote attacker to cause a denial of service or execute arb HIGH
IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configured with compression enabled.
2026-09-17 NVD CVE
CVE-2026-81478: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use HIGH
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this...
2026-09-17 NVD CVE
CVE-2026-81475: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Mis HIGH
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this...
2026-09-17 NVD CVE
CVE-2026-81440: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use HIGH
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...
2026-09-17 NVD CVE
CVE-2026-81476: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Im HIGH
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with...
2026-09-16 NVD CVE
CVE-2025-43936: Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Au HIGH
Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...
2026-09-15 NVD CVE
CVE-2026-81240: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestric HIGH
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this...
2026-09-15 NVD CVE
CVE-2026-81236: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestric HIGH
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this...
◀ PREV PAGE 01 / 17 NEXT ▶