CVE Vulnerability Catalog

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 contain a vulnerability allowing a remote denial of service due to an integer underflow.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper certificate validation, allowing a remote attacker to impersonate the TNC policy server and modify traffic.

A flaw was found in search-v2-operator: its ClusterRole has permissions equivalent to a cluster administrator, allowing impersonation, RBAC modification, CSR approval, and ManifestWork management, leading to excessive privileges and potential privilege escalation.

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress (up to and including 1.2.6) is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover. The admin_user_create_cus AJAX handler lacks authentication or capability checks, allowing unauthenticated attackers to overwrite the email address of any user, including an administrator, and then use the standard lost-password flow to fully take over the account.

IBM Power Systems Firmware (FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2) is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in confidentiality, integrity, and availability impact.

IBM Power Systems Firmware (FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2) is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code execution, giving the attacker full control over the managed system, resulting in confidentiality, integrity, and availability impact.

Orval (prior to 8.21.0) generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. A ${...} expression or backtick in a schema default is emitted into a module-level template literal without safe encoding, allowing attacker-controlled JavaScript to be evaluated when the generated zod schema module is imported, resulting in code execution in the developer, CI, test, or application environment.

Orval (prior to 8.21.0) generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. A ${...} expression or backtick in a query parameter default is emitted into a module-level template literal without safe encoding, allowing attacker-controlled JavaScript to be evaluated when the generated zod schema module is imported, resulting in code execution in the developer, CI, test, or application environment.

Orval (prior to 8.21.0) generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. A ${...} expression or backtick in a header parameter default is emitted into a module-level template literal without safe encoding, allowing attacker-controlled JavaScript to be evaluated when the generated zod schema module is imported, resulting in code execution in the developer, CI, test, or application environment.

Orval (prior to 8.21.0) generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. A ${...} expression or backtick in an array item default is emitted into a module-level template literal without safe encoding, allowing attacker-controlled JavaScript to be evaluated when the generated zod schema module is imported, resulting in code execution in the developer, CI, test, or application environment.

Orval before 8.21.0 unsafely encodes ${...} expressions or backticks in enum defaults in generated zod schemas, allowing malicious JavaScript execution when the module is imported.