Priority HIGH 78
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR st…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.62345 · Published 2009-10-15 · No fix listed CWE-119
Priority MEDIUM 62
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a…
CVSS 3.1LOW 3.4· Network · No auth · User interaction · EPSS 0.99999 · Published 2014-10-15 · Partial fix CWE-329
Priority MEDIUM 61
Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IR…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.18778 · Published 2010-05-20 · No fix listed CWE-134
Priority MEDIUM 51
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00923 · Published 2026-08-20 · No fix listed CWE-287
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00795 · Published 2026-08-20 · No fix listed CWE-190
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-20 · No fix listed CWE-787
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-20 · No fix listed CWE-787
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00735 · Published 2026-08-20 · No fix listed CWE-269
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-20 · No fix listed CWE-787
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format string vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00795 · Published 2026-08-20 · No fix listed CWE-134
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-20 · No fix listed CWE-787
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00795 · Published 2026-08-20 · No fix listed CWE-416
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-20 · No fix listed CWE-120
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00795 · Published 2026-08-19 · No fix listed CWE-843
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00795 · Published 2026-08-19 · No fix listed CWE-190
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-19 · No fix listed CWE-787
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-19 · No fix listed CWE-787
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-19 · No fix listed CWE-121
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0086 · Published 2026-08-19 · No fix listed CWE-78
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-19 · No fix listed CWE-121
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-19 · No fix listed CWE-787
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-19 · No fix listed CWE-787
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00802 · Published 2026-08-19 · No fix listed CWE-787
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00795 · Published 2026-08-19 · No fix listed CWE-787
Priority MEDIUM 50
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00622 · Published 2026-08-19 · No fix listed CWE-190
Load more