Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Aix
Total 992 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-1243 3 Ibm, Linux, Microsoft 4 Aix, Content Navigator, Linux Kernel and 1 more 2026-10-26 N/A 5.4 MEDIUM
IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2026-6732 3 Ibm, Redhat, Xmlsoft 7 Aix, Vios, Enterprise Linux and 4 more 2026-10-26 N/A 6.5 MEDIUM
A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.
CVE-2026-16824 1 Ibm 2 Aix, Vios 2026-10-26 N/A 7.5 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounded recursion.
CVE-2026-16885 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.8 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-16909 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking.
CVE-2026-16897 1 Ibm 2 Aix, Vios 2026-10-26 N/A 4.4 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-16825 1 Ibm 2 Aix, Vios 2026-10-26 N/A 4.2 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.
CVE-2026-16890 1 Ibm 2 Aix, Vios 2026-10-26 N/A 3.6 LOW
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow.
CVE-2026-16829 1 Ibm 2 Aix, Vios 2026-10-26 N/A 5.3 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.
CVE-2026-16903 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.6 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write.
CVE-2026-16901 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.
CVE-2026-16891 1 Ibm 2 Aix, Vios 2026-10-26 N/A 3.3 LOW
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16827 1 Ibm 2 Aix, Vios 2026-10-26 N/A 5.9 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer.
CVE-2026-16883 1 Ibm 2 Aix, Vios 2026-10-26 N/A 5.5 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-19653 1 Ibm 2 Aix, Vios 2026-10-26 N/A 6.5 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations.
CVE-2026-16873 1 Ibm 2 Aix, Vios 2026-10-26 N/A 7.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write.
CVE-2026-16882 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.8 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16822 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.3 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation.
CVE-2026-16874 1 Ibm 2 Aix, Vios 2026-10-26 N/A 7.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles.
CVE-2026-16877 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.