2022 matches found
CVE-2023-45182
CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - تشفير كلمة مرور ضعيف الجدول الزمني تم الإبلاغ عن الثغرة للبائع: 22.09.2023 إصدار النسخة 1.1.9.4 المُصلحة الجديدة: 08.12.2023 الإفصاح العام: 15.12.2023 الوصف يستخدم IBM i Access Client Solutions لتخزين كلمات مرور المستخدمين خوارزمية AES، ومع ذ...
CVE-2023-45184
CVE-2023-45184 حلول عميل الوصول لـ IBM i 1.1.9.4 - التحكم في الوصول المعطل للخادم المحلي. الجدول الزمني تم الإبلاغ عن الثغرة للبائع: 22.09.2023 تم إصدار الإصدار الثابت الجديد 1.1.9.4: 08.12.2023 الإفصاح العام: 15.12.2023 الوصف يستخدم حلول عميل الوصول لـ IBM i لتخزين مفتاح تشفير كلمة المرور المؤقت...
cve-2023-30990
cve-2023-30990-rce IBM i DDM RCE non authentifié - Shell inversé Java...
CVE-2023-30990
استغلالات CVE-2023-30990 انظر مقالنا في المدونة للتفاصيل: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/ تتطلب نصوص Python النصية وحدة ebcdic: pip install ebcdic طريقة DRDA S38CMD python3 ddm.py "" طريقة DRDA SQL python3 ddm-bypass-test.py "" غلاف ربط بسيط مع طريقة S38CMD...
Security Bulletin: IBM i is Affected by an Improper Validation Vulnerability in zlib [CVE-2026-27171]
Summary Zlib for IBM i is vulnerable to increased CPU consumption when using functions crc32combine64 and crc32combine64gen64 CVE-2026-27171 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-27171 DESCRIPTION: zlib before 1.3.2 allows CPU consumption via...
Security Bulletin: IBM i is Affected By A Denial of Service Vulnerability in Host Servers [CVE-2026-81858]
Summary IBM i is vulnerable to a denial of service due to an out-of-bounds read CVE-2026-81858 in host servers as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-81858 DESCRIPTION: IBM i could allow a remote authenticated attacker to cause a denial of service...
Security Bulletin: IBM i is Affected By An Improper Privilege Managment Vulnerability [CVE-2026-18343]
Summary IBM i is vulnerable to allowing a local attacker to modify the BOOTP table due to improper authorization CVE-2026-18343 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18343 DESCRIPTION: IBM i could allow a local attacker to modify the BOOTP table d...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in OpenSSL
Summary IBM i is vulnerable to multiple vulnerabilites CVE-2026-54874, CVE-2026-63072, CVE-2026-63074, CVE-2026-63076, CVE-2026-75803 in OpenSSL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-54874 DESCRIPTION: Issue summary: Receiving a DTLS record for a...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in DST / SST
Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-18318, CVE-2026-17484, CVE-2026-17487 in Dedicated Service Tools DST / System Service Tools SST as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18318 DESCRIPTION: IBM i could allow a remote...
CVE-2026-84414
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...
CVE-2026-84414 IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...
CVE-2026-84414
IBM i versions 7.6, 7.5, 7.4, and 7.3 are vulnerable to an incorrect permission assignment flaw in the Network Authentication Service (NAS) . A local authenticated attacker can change the ownership of arbitrary files because the system fails to properly validate attacker-controlled file paths whi...
EUVD-2026-89202
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...
CVE-2026-84414 IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...
PT-2026-102797
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper validation of an attacker-controlled file path allows a local authenticated attacker to change the ownership of arbitrary files. Recommendations At the moment, there is no information about a...
CVE-2026-84414: Incorrect Permission Assignment for Critical Resource
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...
Security Bulletin: IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service [CVE-2026-84414]
Summary IBM i is vulnerable to allowing a local authenticated attacker to change the ownership of certain files due to running with excessive permissions CVE-2026-84414 in Network Authentication Service NAS as described in the vulnerability details section. Vulnerability Details...
Security Bulletin: IBM i is Affected By a Cross-Site Scripting Vulnerability in Navigator for i [CVE-2026-75838]
Summary IBM Navigator for i uses DOMPurify for HTML sanitization. DOMPurify is vulnerable to cross-site scripting due to failure to neutralize detached subtrees in element-removal hooks CVE-2026-75838 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-75838...