Design/Logic Flaw

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. IBM X-Force ID: 211825...

Vulnerabilities in AIX CAA

IBM SECURITY ADVISORY First Issued: Tue Mar 1 09:31:15 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/caaadvisory2.asc https://aix.software.ibm.com/aix/efixes/security/caaadvisory2.asc...

AIX 7.2 TL 5 : audit (IJ38117)

https://vulners.com/cve/CVE-2021-38955 https://vulners.com/cve/CVE-2021-38955 IBM AIX could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the...

AIX 7.2 TL 4 : audit (IJ38115)

https://vulners.com/cve/CVE-2021-38955 https://vulners.com/cve/CVE-2021-38955 IBM AIX could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the...

AIX 7.2 TL 5 : audit (IJ38119)

https://vulners.com/cve/CVE-2021-38955 https://vulners.com/cve/CVE-2021-38955 IBM AIX could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the...

There is a vulnerability in the AIX audit user commands for VIOS.,There is a vulnerability in the AIX audit user commands.

IBM SECURITY ADVISORY First Issued: Mon Feb 28 16:34:28 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/auditadvisory.asc https://aix.software.ibm.com/aix/efixes/security/auditadvisory.asc...

ROS-2-712

2.712 Mozilla Thunderbird email client vulnerability CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

ROS-2-708

2.708 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

CVE-2021-38993

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the smbcd daemon to cause a denial of service. IBM X-Force ID: 212962...

CVE-2021-38993

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the smbcd daemon to cause a denial of service. IBM X-Force ID: 212962...

CVE-2021-25636

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

AIX : Multiple Vulnerabilities (IJ37501)

The version of AIX installed on the remote host is prior to APAR IJ37501. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37501 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cau...

Vulnerabilities in the AIX kernel

IBM SECURITY ADVISORY First Issued: Wed Feb 23 13:03:11 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/kerneladvisory3.asc https://aix.software.ibm.com/aix/efixes/security/kerneladvisory3.asc...

CVE-2022-21395

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications component: Mediation Engine. Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2021-39056

The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server EDRSQL could allow a remote authenticated user to send a specially crafted request and cause a denial of service. IBM X-Force ID: 214537...

Design/Logic Flaw

The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server EDRSQL could allow a remote authenticated user to send a specially crafted request and cause a denial of service. IBM X-Force ID: 214537...

CVE-2021-39056

The CVE-2021-39056 vulnerability affects the IBM i Extended Dynamic Remote SQL server (EDRSQL) on IBM i versions 7.1–7.4. A remote authenticated user can send a specially crafted request to cause a denial of service. Root cause details in the IBM bulletin align with EDRSQL handling of crafted req...

CVE-2022-0013

A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than...

AIX (IJ36806)

The version of AIX installed on the remote host is prior to APAR IJ36806. It is, therefore, affected by a vulnerability as referenced in the IJ36806 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36815)

The version of AIX installed on the remote host is prior to APAR IJ36815. It is, therefore, affected by a vulnerability as referenced in the IJ36815 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...