Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

4.3

MEDIUM

CVE-2015-1971

Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager (RQM) 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0...

Affected Products : rational_doors_next_generation rational_collaborative_lifecycle_management rational_engineering_lifecycle_manager rational_quality_manager rational_rhapsody_design_manager rational_software_architect_design_manager rational_team_concert rational_requirements_composer
EPSS Score: %0.25

Published: Jan. 03, 2016

Modified: Apr. 12, 2025
7.5

HIGH

CVE-2015-8027

Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service (uncaughtException and service outage) via a pipelined HTTP ...

Affected Products : node.js
EPSS Score: %1.50

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
4.3

MEDIUM

CVE-2015-7452

IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allow remote authenticated users to obtain sensitive informatio...

Affected Products : maximo_asset_management maximo_for_life_sciences maximo_for_nuclear_power maximo_for_oil_and_gas maximo_for_transportation maximo_for_utilities smartcloud_control_desk maximo_asset_management_essentials maximo_for_government
EPSS Score: %0.16

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-7450

Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransf...

Affected Products : websphere_application_server sterling_b2b_integrator sterling_integrator tivoli_common_reporting watson_content_analytics watson_explorer_analytical_components watson_explorer_annotation_administration_console
Actively Exploited

EPSS Score: %93.83

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
4.7

MEDIUM

CVE-2015-7438

IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access....

Affected Products : sterling_b2b_integrator
EPSS Score: %0.04

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
5.5

MEDIUM

CVE-2015-7437

Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors....

Affected Products : sterling_b2b_integrator
EPSS Score: %0.04

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
2.5

LOW

CVE-2015-7436

IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves us...

Affected Products : tivoli_common_reporting
EPSS Score: %0.04

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
2.5

LOW

CVE-2015-7435

IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local...

Affected Products : tivoli_common_reporting
EPSS Score: %0.05

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
6.1

MEDIUM

CVE-2015-7431

Cross-site scripting (XSS) vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL....

Affected Products : sterling_b2b_integrator
EPSS Score: %0.22

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
8.4

HIGH

CVE-2015-7430

The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System (GPFS) allows local users to read or write to arbitrary GPFS data via unspecified vectors....

Affected Products : hadoop spectrum_scale
EPSS Score: %0.05

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
10.0

CRITICAL

CVE-2015-7426

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 and Tivoli Storage FlashCopy Manager for VMware (aka Spec...

Affected Products : spectrum_protect_for_virtual_environments spectrum_protect_snapshot
EPSS Score: %2.73

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
5.5

MEDIUM

CVE-2015-7422

Buffer overflow in IBM i Access 7.1 on Windows allows local users to cause a denial of service (application crash) via unspecified vectors....

Affected Products : windows i_access
EPSS Score: %0.08

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
4.0

MEDIUM

CVE-2015-7416

AFP Workbench Viewer in IBM i Access 7.1 on Windows allows remote attackers to cause a denial of service (viewer crash) via a crafted workbench file....

Affected Products : windows i_access
EPSS Score: %0.22

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
8.8

HIGH

CVE-2015-7407

Cross-site request forgery (CSRF) vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences....

Affected Products : mashups_center
EPSS Score: %0.11

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
4.0

MEDIUM

CVE-2015-7403

IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service (incorrect pointer dereference and node crash) via unspecified vectors....

Affected Products : spectrum_scale general_parallel_file_system
EPSS Score: %0.06

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
7.7

HIGH

CVE-2015-7400

The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XX...

Affected Products : mashups_center
EPSS Score: %0.77

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
5.5

MEDIUM

CVE-2015-7396

The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.1 FP1 for SmartCloud Control Desk allows remote authenticated users to bypass in...

Affected Products : maximo_asset_management maximo_for_life_sciences maximo_for_nuclear_power maximo_for_oil_and_gas maximo_for_transportation maximo_for_utilities smartcloud_control_desk maximo_asset_management_essentials maximo_for_government
EPSS Score: %0.13

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
8.8

HIGH

CVE-2015-2023

Buffer overflow in IBM i Access 7.1 on Windows allows local users to gain privileges via unspecified vectors....

Affected Products : windows i_access
EPSS Score: %0.16

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
6.8

MEDIUM

CVE-2015-1928

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4; Rational Quality Manager (RQM) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x be...

Affected Products : rational_doors_next_generation rational_collaborative_lifecycle_management rational_engineering_lifecycle_manager rational_quality_manager rational_rhapsody_design_manager rational_software_architect_design_manager rational_team_concert rational_requirements_composer
EPSS Score: %0.30

Published: Jan. 02, 2016

Modified: Apr. 12, 2025
5.4

MEDIUM

CVE-2015-7451

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 IF2, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allows remote authe...

Affected Products : maximo_asset_management maximo_for_life_sciences maximo_for_nuclear_power maximo_for_oil_and_gas maximo_for_transportation maximo_for_utilities smartcloud_control_desk maximo_asset_management_essentials maximo_for_government
EPSS Score: %0.17

Published: Jan. 02, 2016

Modified: Apr. 12, 2025

Showing 20 of 291728 Results

Latest CVE Feed

4.3

7.5

4.3

10.0

4.7

5.5

2.5

2.5

6.1

8.4

10.0

5.5

4.0

8.8

4.0

7.7

5.5

8.8

6.8

5.4

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable