Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

IBM iWebsphere Application Server is Affected By a Denial of Service

Risk 43
Severity
7.5
First published (updated )
CVE-2026-10852

IBM Business Automation InsightsWebSphere Application Server Remote Code Execution

Risk 56
Severity
8.8
EPSS
0.26%
First published (updated )
CVE-2026-8858

IBM Business Automation Insightsmulter vulnerable to Denial of Service via incomplete cleanup of aborted uploads

Risk 43
Severity
7.5
First published (updated )
CVE-2026-5038

IBM Business Automation Insightsmulter vulnerable to Denial of Service via deeply nested field names

Risk 43
Severity
7.5
First published (updated )
CVE-2026-5079

npm/form-dataform-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

Risk 47
Severity
8.7
First published (updated )
CVE-2026-12143
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

IBM WebSphere Application ServerIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins

Risk 37
Severity
7.5
EPSS
0.28%
First published (updated )
CVE-2026-8620

IBM Business Automation Insightsfast-uri vulnerable to host confusion via percent-encoded authority delimiters

Risk 31
Severity
7.5
EPSS
0.03%
First published (updated )
CVE-2026-6322

IBM Business Automation Insightsfast-uri vulnerable to path traversal via percent-encoded dot segments

Risk 31
Severity
7.5
EPSS
0.03%
First published (updated )
CVE-2026-6321

IBM Business Automation Insightspgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS

Risk 43
Severity
7.5
First published (updated )
CVE-2026-42198

IBM Business Automation InsightsAxios: no_proxy bypass via IP alias allows SSRF

Risk 43
Severity
7.5
First published (updated )
CVE-2026-42038
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

IBM Business Automation InsightsAxios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy

Risk 54
Severity
8.2
First published (updated )
CVE-2026-42041

IBM Business Automation InsightsAxios: Header Injection via Prototype Pollution

Risk 56
Severity
7.4
First published (updated )
CVE-2026-42035

IBM Business Automation InsightsAxios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

Risk 56
Severity
7.4
First published (updated )
CVE-2026-42033

IBM Business Automation InsightsIBM WebSphere Application Server Liberty is affected by identity spoofing

Risk 70
Severity
7.5
First published (updated )
CVE-2026-3621

IBM Cloud Pak for Business AutomationMultiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.

Risk 60
Severity
8.1
First published (updated )
CVE-2025-36094
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

IBM Business Automation InsightsMulter vulnerable to Denial of Service via unhandled exception from malformed request

Risk 31
Severity
7.5
EPSS
0.05%
First published (updated )
CVE-2025-7338

npm/tar-fstar-fs has issue where extract can write outside the specified dir with a specific tarball

Risk 33
Severity
8.7
EPSS
0.08%
First published (updated )
CVE-2025-48387

npm/tar-fsPath Traversal

Risk 65
Severity
7.5
Exploited
First published (updated )
CVE-2024-12905

IBM Business Automation InsightsSensitive headers incorrectly sent after cross-domain redirect in net/http

Risk 45
Severity
7.4
First published (updated )
CVE-2024-45336

IBM Business Automation InsightsInefficient Regular Expression Complexity in get-func-name

Risk 50
Severity
8.6
First published (updated )
CVE-2023-43646
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

IBM Business Automation InsightsAll versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS)…

Risk 46
Severity
7.5
First published (updated )
CVE-2023-26115

redhat/rh-sso7-keycloakA flaw was found in the json5 package. The affected version of the json5 package could allow an atta…

Risk 83
Severity
8.8
First published (updated )
CVE-2022-46175

IBM Business Automation InsightsA vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of …

Risk 46
Severity
7.5
First published (updated )
CVE-2022-3517

IBM Business Automation InsightsImproper Privilege Management in shelljs/shelljs

Risk 54
Severity
7.1
First published (updated )
CVE-2022-0144

IBM Business Automation InsightsPrototype Pollution

Risk 66
Severity
7.2
First published (updated )
CVE-2020-7751
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

IBM Business Automation InsightsInput Validation

Risk 44
Severity
7.5
First published (updated )
CVE-2016-10540

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203