CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.
A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected is an unknown functionality of the file login.php. Manipulation of the argument user/pass leads to SQL injection. The attack may be performed remotely, and the exploit has been disclosed publicly. This product utilizes a rolling release system, so version information is not disclosed. The vendor was contacted but did not respond.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to the use of a hard-coded or predictable cryptographic key.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift transmits sensitive information in cleartext. A remote attacker could intercept this traffic and obtain confidential information.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift does not properly neutralize HTML input, enabling cross-site scripting (XSS). A remote attacker could execute arbitrary JavaScript in an authenticated user's browser.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift improperly uses reflection with externally controlled input. A remote attacker could cause a denial of service.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a buffer overflow vulnerability. A remote authenticated attacker could exploit it to execute arbitrary code.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift has improper authentication and missing authorization. A remote attacker could perform unauthorized actions.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to server-side request forgery (SSRF). A local attacker could obtain sensitive information and trigger unauthorized actions.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS