Unix

🟠 High   ⏱ 30–90 min  Last verified: 23 May 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-1999-0055, IBM Support Bulletin CVE: CVE-1999-0055 NVD summary: Buffer overflows in Sun libnsl allow root access. References: sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=col   www-1.ibm.com/support/search.wss?rs=0&q=IX80543&   sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=col Table of contents Symptom & Impact Environment & Reproduction Root […]

🟡 Medium   ⏱ 15–45 min  Last verified: 22 May 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2022-42444, IBM Support Bulletin CVE: CVE-2022-42444 NVD summary: IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow a […]

🟡 Medium   ⏱ 15–45 min  Last verified: 22 May 2023 Affected versions: IBM AIX 7.1 Affected: 7.2, 7.3 📖 ~4 min read  •  Source: NVD CVE-2023-45172, IBM Support Bulletin CVE: CVE-2023-45172 NVD summary: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to […]

🟡 Medium   ⏱ 15–45 min  Last verified: 22 May 2023 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2023-27859, IBM Support Bulletin CVE: CVE-2023-27859 NVD summary: IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple […]

🟠 High   ⏱ 30–90 min  Last verified: 22 May 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2008-1600, IBM Support Bulletin CVE: CVE-2008-1600 NVD summary: The lsmcode program on IBM AIX 5.2, 5.3, and 6.1 does not properly handle environment variables, which allows local users to gain privileges, a […]

🟠 High   ⏱ 30–90 min  Last verified: 21 May 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-1999-0046, IBM PSIRT advisory page CVE: CVE-1999-0046 NVD summary: Buffer overflow of rlogin program using TERM environmental variable. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom & Impact Environment & Reproduction Root […]

🟡 Medium   ⏱ 15–45 min  Last verified: 20 May 2023 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2023-25926, IBM Support Bulletin CVE: CVE-2023-25926 NVD summary: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing […]

🟡 Medium   ⏱ 15–45 min  Last verified: 20 May 2023 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2022-22425, IBM Support Bulletin CVE: CVE-2022-22425 NVD summary: "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper […]

🟡 Medium   ⏱ 15–45 min  Last verified: 19 May 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2018-20732, IBM PSIRT advisory page CVE: CVE-2018-20732 NVD summary: SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant. References: www.securityfocus.com/bid/106648   support.sas.com/kb/63/391.html   […]

🟡 Medium   ⏱ 15–45 min  Last verified: 19 May 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2023-42009, IBM Support Bulletin CVE: CVE-2023-42009 NVD summary: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus […]