🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2025-36075 MEDIUM IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allo... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2024-41786 MEDIUM IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server to return contents of a sensitiv... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2025-1837 MEDIUM IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform una... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2025-0166 LOW IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sensitive source code information... | LOW | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124553 HIGH BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaustion vulnerability that allows remote attackers to exhaust CPU and memory by supplying unb... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124552 MEDIUM Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules' list.cgi, which renders table ... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124551 MEDIUM ClassroomIO through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users of any organization to clone other tenants�... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124474 MEDIUM MRBS (Meeting Room Booking System) before 1.12.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inje... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124465 HIGH Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerability in batch_consumer.go that panics when a single record exce... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124331 MEDIUM A vulnerability was identified in Jinher OA C6. This impacts an unknown function of the file /C6/JHSoft.Web.Project/OfficeReadOnly/ProjectAfficheManag... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124494 CRITICAL SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the html.clean() sanitizer's _normalizeURL() function decodes... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124493 CRITICAL SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header textContent into inner... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124492 HIGH SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList, which inserts entity-deco... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124491 MEDIUM SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create() method that assigns server-returned file... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124490 CRITICAL OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of oe-module-faxsms that allows a... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124489 HIGH OpenEMR before 8.3.0 contains a broken access control vulnerability in portal/portal_payment.php that allows low-privilege authenticated users to bypa... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124488 HIGH OpenEMR before 8.3.0 contains an authorization bypass vulnerability that allows authenticated clinicians lacking high-sensitivity permission to read a... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124487 HIGH OpenEMR before 8.4.0 contains an improper authorization vulnerability in the non-patient POST /fhir/DocumentReference/$docref route that allows low-pr... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124486 HIGH OpenEMR before 8.3.0 contains a missing authorization vulnerability in the classic document controller that allows low-privilege authenticated users t... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124485 HIGH OpenEMR before 8.3.0 contains an authorization bypass vulnerability in the patient portal onsitedocuments API that allows authenticated patients to re... | HIGH | ????? | ????? | NVD | 5 days ago |