Filtered by vendor Ibm Subscriptions
Total 8966 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-17157 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 9.8 Critical
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-18835 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 9.9 Critical
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-18832 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 8.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.
CVE-2026-18828 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 5.4 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.
CVE-2026-18822 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 4.4 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records.
CVE-2026-18716 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 7.9 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.
CVE-2026-18670 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 8.2 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow.
CVE-2026-17436 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 8.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.
CVE-2026-17425 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 7.5 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow.
CVE-2026-17424 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 4.8 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory.
CVE-2026-17423 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 7.7 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read.
CVE-2026-17422 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 9.3 Critical
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-17195 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 6.5 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-17170 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 7.5 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size.
CVE-2026-17168 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 8.5 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-17165 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 7.5 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.
CVE-2026-17159 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 7.5 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.
CVE-2026-17160 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-25 9.8 Critical
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.
CVE-2026-17042 1 Ibm 21 Power Hardware Management Console \(7063-cr2\), Power Hardware Management Console \(7063-cr2\) Firmware, Power System Ac922 \(8335-gth\) and 18 more 2026-08-25 7.3 High
IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This condition persists until operator intervention — clearing NVRAM via the service processor — to restore normal operation. This vulnerability only affects OpenPOWER systems; systems running PowerVM are not affected. Successful exploitation results in an integrity and availability impact to the managed system.
CVE-2026-17468 1 Ibm 1 Documentation Offline 2026-08-25 5.3 Medium
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.