298 matches found
CVE-2026-11885
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...
EUVD-2026-51238
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...
CVE-2026-11885
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...
CVE-2026-11885 Power System update in Buffer Copy
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...
CVE-2026-11885
CVE-2026-11885 affects IBM PowerVM Hypervisor. A crafted OS hypervisor call can crash the hypervisor or compromise OS memory integrity. Affected firmware: FW1110.00–FW1110.20, FW1060.00–FW1060.71, and FW950.00–FW950.H1. Root cause cited as CWE-120 (Buffer Copy without Checking Size of Input). Rem...
CVE-2026-11885 Power System update in Buffer Copy
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...
CVE-2026-4932
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption TME hardware to decrypt encrypted memory due to insufficient cryptographic entropy...
EUVD-2026-49954
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption TME hardware to decrypt encrypted memory due to insufficient cryptographic entropy...
CVE-2026-4932 This Power System update is being released to address Insufficient Entropy
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption TME hardware to decrypt encrypted memory due to insufficient cryptographic entropy...
Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway
Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-50645 DESCRIPTION: There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF, which can lead ...
Security Bulletin: This Power System update is being released to address CVE-2026-4932
Summary A firmware issue was identified where the generated AES key used to initialize the Transparent Memory Encryption TME hardware has weakened encryption strength. Vulnerability Details CVEID:CVE-2026-4932 DESCRIPTION: PowerVM Hypervisor could allow an attacker with physical access to the...
Security Bulletin: This Power System update is being released to address CVE-2026-11885
Summary A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise system or OS memory integrity. Vulnerability Details CVEID:CVE-2026-11885 DESCRIPTION: A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory...
CVE-2026-14971
IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions...
CVE-2026-14971
CVE-2026-14971 affects IBM PowerVM Novalink (NovaLink APIs) with misconfiguration that can increase attack surface and enable unintended/unauthorized operations under non-default conditions. Affected PowerVM Novalink versions include 2.2.0, 2.2.1, 2.2.1.1 and 2.3.0, 2.3.0.1, 2.3.1, 2.3.2. IBM rep...
CVE-2026-9171
IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
CVE-2026-9171 Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.
IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
CVE-2026-9171
IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
EUVD-2026-45250
IBM PowerVM Novalink are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
CVE-2026-9171 Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.
IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
PT-2026-60837
IBM PowerVM Novalink are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...