107211 matches found
CVE-2026-16932
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable...
CVE-2026-16923
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...
CVE-2026-16924
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation...
CVE-2026-16926
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...
CVE-2026-16922
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...
CVE-2026-16925
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization...
Security Bulletin: IBM Cyber Fraud includes components with multiple known vulnerabilities
Summary IBM Cyber Fraud includes components with known vulnerabilities. These have been addressed in the update. Vulnerability Details CVEID:CVE-2026-66010 DESCRIPTION: DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via...
Security Bulletin: Vulnerabilities exists in IBM Netezza Software
Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 11.3.1.3. Vulnerability Details CVEID:CVE-2026-42013 DESCRIPTION: A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to...
CVE-2026-16932
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 fail to properly validate the ODMDIR environment variable, allowing a local attacker with low privileges to execute arbitrary commands. CVSS 3.1 scores this HIGH (8.8), with impact on confidentiality, integrity, and availability. Exploitation status is not pro...
CVE-2026-16932 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable...
EUVD-2026-63389
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable...
CVE-2026-16932 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable...
CVE-2026-16928
IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain a heap-based buffer overflow exploitable remotely without authentication, causing denial of service (CVSS 7.5 HIGH, impact limited to availability). IBM's support page is linked as the primary reference. No exploitation or patch details are provided ...
EUVD-2026-63388
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow...
CVE-2026-16928 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow...
CVE-2026-16927
A TOCTOU race condition in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to escalate to root, yielding full confidentiality, integrity, and availability impact (CVSS 7.3 HIGH). CISA reports no known exploitation. IBM's fix is documented at https://www.ibm.com/su...
CVE-2026-16927 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...
CVE-2026-16927 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...