Search

Search Results (383202 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-20177 1 Cisco 1 Cisco Industrial Ethernet Switches 2026-08-20 5.3 Medium
A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management plane flooding attacks. An attacker could exploit this vulnerability by sending a high rate of ICMP, SSH, or HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the CPU of the device to increase, resulting in a denial of service (DoS) condition on the device manager web GUI, SSH, or API. Data traffic through the device is not affected.
CVE-2026-17153 2 Siteground, Wordpress 2 Ai Agent By Siteground, Wordpress 2026-08-20 5.3 Medium
The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images to the WordPress media library, bypassing the upload_files capability restriction that Contributors are normally subject to, as authenticated attackers with Contributor-level access or above can satisfy the endpoint's nonce and permission checks. The sg_ai_studio_gutenberg_nonce required by the endpoint is emitted to any user with block editor access — including Contributors — making the absent upload_files check the sole barrier to exploitation.
CVE-2026-16913 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 9.8 Critical
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-16911 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 8.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-16909 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 8.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking.
CVE-2026-16897 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 4.4 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-16894 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 9.8 Critical
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-16891 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 3.3 Low
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16890 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 3.6 Low
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow.
CVE-2026-16883 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 5.5 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16882 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 9.8 Critical
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16874 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 7.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles.
CVE-2026-16873 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 7.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write.
CVE-2026-16869 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 7.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables.
CVE-2026-16866 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 4.8 Medium
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVE-2026-16865 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 8.8 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection.
CVE-2026-16706 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 7.5 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-16686 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 8.2 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication.
CVE-2026-16019 1 Faydam Innovation 1 Faydam Datalogger 2026-08-20 9.8 Critical
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Faydam Innovation Inc. FAYDAM Datalogger allows SQL Injection. This issue affects FAYDAM Datalogger: from 2.7.1 before 2.8.0.
CVE-2026-14970 1 Ibm 3 Aix, Powervm Vios, Vios 2026-08-20 7.5 High
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow.