8642 matches found
EUVD-2026-58227
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management...
CVE-2026-18071 IBM i is Affected By An Improper Management Vulnerability in HTTP Server []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management...
CVE-2026-18071
IBM i 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-18071 due to improper privilege management in the HTTP Server, enabling a local attacker to gain elevated privileges (CWE-269). Base CVSS v3.1 score is 7.8 (HIGH) with LOCAL, low attack complexity, requiring LOW privileges and no user interact...
CVE-2026-70464
rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggering the I/O timeout. Attackers can open many simultaneous...
EUVD-2026-58042
rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...
EUVD-2026-57599
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information due to an integer underflow...
PT-2026-71835
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management...
PT-2026-71822
IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...
PT-2026-71829
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can bypass security restrictions because of improper validation of anti-CSRF tokens. Cross-Site Request Forgery CSRF is a type of attack that tricks a victim into...
PT-2026-71742
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially...
PT-2026-71824
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A heap-based buffer overflow allows a remote authenticated attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can...
PT-2026-71864
IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service...
PT-2026-71821
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...
PT-2026-71857
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...
PT-2026-71843
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
PT-2026-71811
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...
PT-2026-71817
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...
PT-2026-71837
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...
PT-2026-71728
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper privilege management in the HTTP Server may allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer version that contains a fi...