Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

237 records in Vios · all components

Priority HIGH 78

Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR st…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.62345 Published 2009-10-15 No fix listed CWE-119
Priority MEDIUM 62

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a…

CVSS 3.1LOW 3.4 Network No auth User interaction EPSS 0.99999 Published 2014-10-15 Partial fix CWE-329
Priority MEDIUM 61

Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IR…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.18778 Published 2010-05-20 No fix listed CWE-134
TI-2026-14245 CVE-2026-17142 · GHSA-pjqq-8r6c-4f8w

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 51

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00923 Published 2026-08-20 No fix listed CWE-287
TI-2026-14253 CVE-2026-17160 · GHSA-wvpp-p4gf-mc93

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00795 Published 2026-08-20 No fix listed CWE-190
TI-2026-14251 CVE-2026-17157 · GHSA-5xv4-9g3c-88fq

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-20 No fix listed CWE-787
TI-2026-14248 CVE-2026-17152 · GHSA-j437-fhrr-26hx

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-20 No fix listed CWE-787
TI-2026-14246 CVE-2026-17145 · GHSA-2fr6-wpcj-w435

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00735 Published 2026-08-20 No fix listed CWE-269
TI-2026-14244 CVE-2026-17141 · GHSA-2p49-qvr9-pw9j

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-20 No fix listed CWE-787
TI-2026-14242 CVE-2026-17136 · GHSA-4x62-vxrg-5r3p

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format string vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00795 Published 2026-08-20 No fix listed CWE-134
TI-2026-14238 CVE-2026-17122 · GHSA-7rpq-xcrw-jvfg

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-20 No fix listed CWE-787
TI-2026-14235 CVE-2026-17118 · GHSA-33qx-26f4-f26q

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00795 Published 2026-08-20 No fix listed CWE-416
TI-2026-14184 CVE-2026-17040 · GHSA-jg5p-q458-f282

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-20 No fix listed CWE-120
TI-2026-14083 CVE-2026-16919 · GHSA-wmhw-pqqc-2j2p

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00795 Published 2026-08-19 No fix listed CWE-843
TI-2026-14082 CVE-2026-16917 · GHSA-5239-8prx-9h9f

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00795 Published 2026-08-19 No fix listed CWE-190
TI-2026-14079 CVE-2026-16913 · GHSA-59pj-mhpc-mwm2

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-19 No fix listed CWE-787
TI-2026-14064 CVE-2026-16894 · GHSA-mfcf-ph4g-vj2m

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-19 No fix listed CWE-787
TI-2026-14057 CVE-2026-16885 · GHSA-9467-h86m-9p84

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-19 No fix listed CWE-121
TI-2026-14055 CVE-2026-16882 · GHSA-5mpc-4p97-jh8g

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0086 Published 2026-08-19 No fix listed CWE-78
TI-2026-14046 CVE-2026-16872 · GHSA-mm39-wv8x-4288

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-19 No fix listed CWE-121
TI-2026-14038 CVE-2026-16864 · GHSA-84pc-jr2g-4x38

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-19 No fix listed CWE-787
TI-2026-14036 CVE-2026-16862 · GHSA-84mv-7973-x7m2

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-19 No fix listed CWE-787
TI-2026-14021 CVE-2026-16845 · GHSA-7c39-w5pm-p52w

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00802 Published 2026-08-19 No fix listed CWE-787
TI-2026-14016 CVE-2026-16840 · GHSA-w74v-4vvf-qm9c

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00795 Published 2026-08-19 No fix listed CWE-787
TI-2026-14010 CVE-2026-16834 · GHSA-cpmx-x7w2-qmhv

Vulnerabilities in IBM AIX and PowerVM VIOS

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00622 Published 2026-08-19 No fix listed CWE-190
Load more
Open these records in search →