38351 matches found
Security Bulletin:Vulnerability in BIND 9 affects IBM Netezza Appliance
Summary The BIND 9 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-5946 Vulnerability Details CVEID:CVE-2026-5946 DESCRIPTION: Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet...
Security Bulletin:Vulnerability in urllib3 affects IBM Netezza Appliance
Summary The urllib3 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-44431, CVE-2026-44432 Vulnerability Details CVEID:CVE-2026-44431 DESCRIPTION: urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirec...
Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance
Summary The Netty package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587 Vulnerability Details CVEID:CVE-2026-42580 DESCRIPTION: Netty is an asynchronous, event-driven network...
Security Bulletin:Vulnerability in Perl affects IBM Netezza Appliance
Summary The Perl package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-4176 Vulnerability Details CVEID:CVE-2026-4176 DESCRIPTION: Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a...
Security Bulletin:Vulnerability in Crypto affects IBM Netezza Appliance
Summary The Crypto package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2025-68121 Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated...
Security Bulletin:Vulnerability in Glib2 affects IBM Netezza Appliance
Summary The Glib2 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2025-14087 Vulnerability Details CVEID:CVE-2025-14087 DESCRIPTION: A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leadi...
Security Bulletin:Vulnerability in zstd affects IBM Netezza Appliance
Summary The zstd package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2021-24032 Vulnerability Details CVEID:CVE-2021-24032 DESCRIPTION: Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line...
Security Bulletin:Vulnerability in rsync affects IBM Netezza Appliance
Summary The rsync package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41035 Vulnerability Details CVEID:CVE-2026-41035 DESCRIPTION: In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to ...
Security Bulletin:Vulnerability in Sudo affects IBM Netezza Appliance
Summary The Sudo package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-35535 Vulnerability Details CVEID:CVE-2026-35535 DESCRIPTION: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege dro...
Security Bulletin:Vulnerability in Go JOSE affects IBM Netezza Appliance
Summary The Go JOSE package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-34986 Vulnerability Details CVEID:CVE-2026-34986 DESCRIPTION: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go,...
Security Bulletin:Vulnerability in Vim affects IBM Netezza Appliance
Summary The Vim package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2020-20703 Vulnerability Details CVEID:CVE-2020-20703 DESCRIPTION: Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand...
Security Bulletin: Vulnerabilities exists in IBM Netezza Software
Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2025-68287 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3removerequests call...
Security Bulletin: IBM Storage Protect Operations Center is affected by a prototype pollution vulnerability (CVE-2026-29063).
Summary IBM Storage Protect Server OSSM and ObjectAgent components are affected by a prototype pollution vulnerability. Vulnerability Details CVEID:CVE-2026-29063 DESCRIPTION: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype...
Security Bulletin: IBM Storage Protect Operations Center is affected by multiple arbitrary code execution vulnerabilities(CVE-2026-8633).
Summary IBM Storage Protect Operations Center is affected by vulnerabilities that could allow remote, unauthenticated arbitrary code execution. Vulnerability Details CVEID:CVE-2026-8633 DESCRIPTION: IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM...
Security Bulletin: IBM Storage Protect for Space Management is vulnerable to prototype pollution due to Immutable.js (CVE-2026-29063)
Summary IBM Storage Protect for Space Management uses Immutable.js as part of its web-based user interface components. A prototype pollution vulnerability in Immutable.js could allow an attacker to modify object prototypes through specially crafted input processed by affected APIs, potentially...
Security Bulletin: IBM Storage Protect Client and Virtual Environments are vulnerable to prototype pollution due to Immutable.js (CVE-2026-29063)
Summary IBM Storage Protect Client and Virtual Environments use Immutable.js to support its web-based user interface components. A prototype pollution vulnerability in Immutable.js could allow an attacker to manipulate object prototypes through specially crafted input, potentially leading to...
Security Bulletin: IBM Operational Decision Manager for July 2026 - Multiple CVEs addressed
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Operational Decision Manager Vulnerability Details CVEID:CVE-2025-11143 DESCRIPTION: The Jetty URI parser has some key differences to other common parsers when...
Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-45186 DESCRIPTION: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized craft...
Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.
Summary IBM ApplinX has been updated in order to address multiple vulnerabilities CVE-2026-59879, CVE-2026-59880, CVE-2026-16221. Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to...
Security Bulletin:IBM Sterling Global Availability Mailbox uses bcprov-jdk15to18-1.78.1.jar, which is affected by CVE-2025-14813 and CVE-2026-5598, exposing the system to potential security risks including unauthorized access, denial of service.
Summary IBM Sterling Global Availability Mailbox uses bcprov-jdk15to18-1.78.1.jar, which is affected by CVE-2025-14813 and CVE-2026-5598, exposing the system to potential security risks including unauthorized access, denial of service, or remote code execution. Vulnerability Details...
Security Bulletin: IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak (CVE-2026-18096)
Summary IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak. Vulnerability Details CVEID:CVE-2026-18096 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...
Security Bulletin: IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. (CVE-2026-18097)
Summary IBM® Db2® could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. Vulnerability Details CVEID:CVE-2026-18097 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain...
Security Bulletin: IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data. (CVE-2026-16480)
Summary IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data. Vulnerability Details CVEID:CVE-2026-16480 DESCRIPTION: IBM Db2 is affected by an improper authorization...
Security Bulletin: IBM® Db2® is vulnerable to privilege escalation with a specially crafted query (CVE-2026-10543)
Summary IBM® Db2® is vulnerable to privilege escalation with a specially crafted query. Vulnerability Details CVEID:CVE-2026-10543 DESCRIPTION: IBM Db2 is vulnerable to privilege escalation with a specially crafted query. CWE:CWE-285: Improper Authorization CVSS Source: IBM CVSS Base score: 8.2...
Security Bulletin: IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser (CVE-2026-10534)
Summary IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser. Vulnerability Details CVEID:CVE-2026-10534 DESCRIPTION: Db2 is vulnerable to buffer overflow in the IXF IMPORT parser. CWE:CWE-121: Stack-based Buffer Overflow CVSS Source: IBM CVSS Base score: 8.4 CVSS...
Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in Corosync 3.1.9 (CVE-2026-35091, CVE-2026-35092)
Summary IBM® Db2® is affected by multiple vulnerabilities in Corosync 3.1.9. Vulnerability Details CVEID:CVE-2026-35091 DESCRIPTION: A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check ...
Security Bulletin: Unauthenticated denial of service via unbounded request body processing
Summary Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability,...
Security Bulletin: Unauthenticated denial of service via unbounded external gRPC connection acceptance
Summary Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptance on the external gRPC listeners. A remote attacker may exhaust agent file descriptors, goroutines, and memory by opening many...
Security Bulletin: Consul vulnerable to partial arbitrary file read via Vault Connect CA provider
Summary Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with operator:write permission may direct Consul to read and...
Security Bulletin: L7 intention authorization bypass via custom public listener
Summary Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are blocked by a path-based deny intention...
Security Bulletin: Uncontrolled resource consumption in the Consul Connect CA roots endpoint
Summary Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect CA roots endpoint that may allow a remote caller to grow the agent's Connect CA roots cache without bound, defeating the operator's cache-disable...
Security Bulletin: Uncontrolled resource consumption in the Consul Connect authorization endpoint
Summary Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allow a caller to grow the agent's intention-match cache without bound, defeating the operator's cache-disable...
Security Bulletin: Authorization bypass for session deletion in the transaction API
Summary Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary...
Security Bulletin: Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path
Summary Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service in the Enterprise-to-Community Edition downgrade path that may allow an authorized caller to crash the Consul server. A caller with config-entry write permission can...
Security Bulletin: IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
Summary IBM i Access Client Solutions ACS is vulnerable to multiple vulnerabilities CVE-2026-13094, CVE-2026-13105, CVE-2026-13433, CVE-2026-14866, CVE-2026-14875, CVE-2026-16695 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-13094 DESCRIPTION: IBM i Acces...
Security Bulletin: Multiple vulnerabilities fixed in IBM SevOne Network Performance Management for July 2026
Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight component with a Service Pack update. Vulnerability Details CVEID:CVE-2025-61723 DESCRIPTION: The processing time for parsing some invalid inputs scales non-linearly with respect to...
Security Bulletin: Multiple vulnerabilities affect IBM® Db2® Big SQL on IBM Software Hub.
Summary Multiple vulnerabilities affect IBM® Db2® Big SQL on IBM Software Hub 5.4 and earlier Vulnerability Details CVEID:CVE-2026-45149 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max option was being...
Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub
Summary Multiple vulnerabilities were addressed in IBM Data Product Hub version 5.4.0 Patch 4 Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the field argument to FormDataappend and the...
Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.
Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data version 5.4.0 before Patch 4. Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the field...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in DNS [CVE-2026-3039, CVE-2026-3592, CVE-2026-5946]
Summary BIND Domain Name System for IBM i is vulnerable to exessive memory consumption when receiving specially constructed packets CVE-2026-3039, amplified resource consumption when querying a specially crafted zone CVE-2026-3592, and flaws in handling of DNS messages whose CLASS is not Internet...
Security Bulletin:Mako Template Lookup Path Traversal Vulnerability Fixed in 1.3.11
Summary Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when a URI starts with // e.g., //../../../secret.txt. The root cause is an inconsistency between two slash-stripping implementations. Any file readable by the process...
Security Bulletin:Improper Chain of Trust in Erlang OTP's pubkey_cert Module Allows Certificate Forgery
Summary Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP publickey pubkeycert module allows a non-CA certificate to be accepted as an intermediate issuer, enabling certificate chain forgery. In lib/publickey/src/pubkeycert.erl, pubkeycert:validateextensions/7...
Security Bulletin:Predictable Numbers/Identifiers Vulnerability in Erlang/OTP Kernel inet_res & inet_db Modules: DNS Cache Poisoning Risk
Summary Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolver inetres uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomizatio...
Security Bulletin: Multiple vulnerabilities in IBM Semeru affects IBM® Db2® (April 2026 CPU)
Summary There are vulnerabilities in IBM Runtime Environment Java™ Version 8.0.8.60 and earlier, and IBM Semeru Version 21.0.10.0 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM Java SDK updates in April 2026 Vulnerability Details CVEID:CVE-2026-22021 DESCRIPTION:...
Security Bulletin: There is a vulnerability in freemarker-2.3.22.jar used by IBM Maximo Manage application in IBM Maximo Application Suite.
Summary There is a vulnerability in freemarker-2.3.22.jar used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details ID:WS-2020-0455 DESCRIPTION: Affected versions of this package are vulnerable to Server-side Template Injection SSTI. By allowing user input into...
Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL
Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.4.2. Vulnerability Details CVEID:CVE-2026-13757 DESCRIPTION: A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a...
Security Bulletin:Vulnerability in SQLite affects IBM Netezza Appliance
Summary The SQLite package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2024-0232 Vulnerability Details CVEID:CVE-2024-0232 DESCRIPTION: A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray function in sqlite3.c. Thi...
Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty and open62541
Summary IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty and open62541. Vulnerability Details CVEID:CVE-2026-56745 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through...
Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance
Summary The Netty package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-42583 Vulnerability Details CVEID:CVE-2026-42583 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final,...
Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance
Summary The Netty package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-44248 Vulnerability Details CVEID:CVE-2026-44248 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, t...