505970 matches found
dracut: dracut: Root code execution via DHCP options command injection
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...
dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...
CVE-2026-19437
CVE-2026-19437 is a buffer overflow vulnerability in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 that allows a remote attacker to execute arbitrary code . The CVSS 3.1 score is 8.1 (HIGH) with a network attack vector, high complexity, no privileges or user interaction required, and high impact o...
CVE-2026-19437 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...
USN-8657-1 vim vulnerabilities
It was discovered that Vim incorrectly handled memory when decoding certain JSON input. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. CVE-2026-73071 Yazan Balawn...
CVE-2026-18835
CVE-2026-18835 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A remote authenticated attacker with low privileges can execute arbitrary commands via OS command injection (improper neutralization of special elements in an OS command). The CVSS 3.1 score is 9.9 (CRITICAL) with a changed scope ...
CVE-2026-18840 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer...
CVE-2026-18840
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local privilege escalation via improper validation of an attacker-controlled pointer, enabling arbitrary code execution (CVSS 8.2 HIGH). No patch version or remediation guidance is provided in the documents; no in-the-wild exploitation is rep...
CVE-2026-18832
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a heap-based buffer overflow exploitable by a remote, unauthenticated attacker to execute arbitrary code (CVSS 8.8 HIGH). The IBM support page (https://www.ibm.com/support/pages/node/7283858) is the only reference; no specific patch version or exploita...
CVE-2026-18832 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...
CVE-2026-18824
CVE-2026-18824 is an OS command injection vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , caused by improper neutralization of special elements used in an OS command. A remote authenticated attacker can execute arbitrary commands, resulting in full compromise of confidentiality, inte...
CVE-2026-17436 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...
CVE-2026-17436
CVE-2026-17436 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A heap-based buffer overflow allows a remote attacker to execute arbitrary code. The CVSS 3.1 score is 8.8 (HIGH) with an adjacent network attack vector, requiring no privileges and no user interaction . CISA SSVC assessment indic...
CVE-2026-17422
CVE-2026-17422 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker can exploit a buffer overflow to execute arbitrary code, with a CVSS 3.1 score of 9.3 (CRITICAL) — the vector indicates no privileges required, no user interaction, and a scope change with full confidentiality, in...
CVE-2026-17168 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-17168
CVE-2026-17168 is a stack-based buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote authenticated attacker to execute arbitrary code. The CVSS 3.1 score is 8.5 (HIGH) with a changed scope, reflecting full compromise of confidentiality, integrity, and availability. CI...
CVE-2026-17160
CVE-2026-17160 is a critical (CVSS 9.8) vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , caused by an integer overflow during size computation that allows a remote, unauthenticated attacker to execute arbitrary code over the network with no user interaction. CISA's SSVC assessment rat...
CVE-2026-17160 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation...
CVE-2026-17157
CVE-2026-17157 is a critical (CVSS 9.8) stack buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote attacker to execute arbitrary code over the network with no privileges or user interaction required. It is one of seven similar stack buffer overflow CVEs disclosed toge...