107815 matches found
CVE-2026-53791
A flaw in rsync allows an unauthenticated remote attacker to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source IP address, granting unauthorized access to restricted resources. Mitigation Restrict rsync daemon TCP/873 to the trusted proxy only CME-202...
CVE-2026-76158 Datiphy Data Management Center - External Control of File Name or Path
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences...
CVE-2026-76158
Datiphy Data Management Center (v8.3.0 through v8.5.1) contains a path traversal vulnerability in its upload API endpoint. An unauthenticated remote attacker can supply relative or absolute path sequences to write files to arbitrary locations outside the intended upload directory, enabling arbitr...
CVE-2026-76157
Datiphy Data Management Center v8.3.0 through v8.5.1 has an unauthenticated upload API endpoint allowing remote attackers to upload arbitrary files, scoring CVSS 8.8 (HIGH) for integrity and availability impact. No exploitation evidence or patch details are provided; monitor the advisory at https...
EUVD-2026-63741
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
EUVD-2026-63726
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size...
EUVD-2026-63734
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read...
EUVD-2026-63646
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
EUVD-2026-63721
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow...
EUVD-2026-63640
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation...
EUVD-2026-63645
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer overflow...
CVE-2026-17423
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read...
CVE-2026-17160
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation...
CVE-2026-17152
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...
CVE-2026-18828 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...
CVE-2026-17425
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have a stack buffer overflow exploitable remotely with no authentication, causing denial of service (CVSS 7.5). IBM's support page (https://www.ibm.com/support/pages/node/7283858) should be checked for applicable fixes. Exploitation details are not provided.
CVE-2026-17170
IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 fail to properly validate an allocation size, allowing an unauthenticated remote attacker to trigger a denial of service (CVSS 7.5 HIGH, availability impact). IBM's support page (https://www.ibm.com/support/pages/node/7283858) may contain patch details. No in...
CVE-2026-17160
CVE-2026-17160 is a critical (CVSS 9.8) vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , caused by an integer overflow during size computation that allows a remote, unauthenticated attacker to execute arbitrary code over the network with no user interaction. CISA's SSVC assessment rat...