29242 matches found
CVE-2026-77811: Improper Neutralization of Input During Web Page Generation
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
CVE-2026-18716
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read...
CVE-2026-18824 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-18716 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read...
CVE-2026-73199
A flaw was found in the ipa-enrollment SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol LDAP extended operation. By omitting the request value for the JOINOID in the ipa-enrollment extende...
CVE-2026-18835: Improper Neutralization of Special Elements used in an OS Command
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-18824: Improper Neutralization of Special Elements used in an OS Command
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-18716: Out-of-bounds Read
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read...
CVE-2026-17168: Out-of-bounds Write
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-18544
IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...
CVE-2026-17015 IBM i Denial of Service
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...
CVE-2026-17015
IBM i versions 7.3 through 7.6 are affected by an out-of-bounds read (CWE-125) in the 5770-SS1 feature, allowing a remote authenticated attacker to cause a denial of service and obtain sensitive information. IBM rates the vulnerability CVSS 5.4 (MEDIUM) while the NVD assigns 8.1 (HIGH) , reflecti...
CVE-2026-18102
IBM i versions 7.3 through 7.6 (feature 5770-999) contain a heap-based buffer overflow (CWE-122) caused by an integer underflow during bounds checking . A remote authenticated attacker can exploit this to overwrite adjacent memory, resulting in a partial integrity impact. NVD rates it 4.3 MEDIUM ...
EUVD-2026-62853
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...
CVE-2026-18544
IBM Portieris (a Kubernetes admission controller for image policy enforcement) is vulnerable to image policy bypass in versions prior to v0.14.3 . The root cause is improper authorization of pod ownerReferences : when a pod contains a fabricated ownerReference whose Kind matches a supported contr...
CVE-2026-16911 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow...
CVE-2026-16877
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable by a remote authenticated attacker (CVSS 8.8 High), enabling arbitrary code execution with full confidentiality, integrity, and availability impact. IBM's support page (https://www.ibm.com/support/pages/node/72...
CVE-2026-16825
IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 are affected by an out-of-bounds write (CVSS 4.2 MEDIUM) exploitable by a remote authenticated attacker to obtain sensitive information and cause denial of service. No exploitation or remediation details are provided; refer to IBM advisory https://www.ibm.co...