Vulnerabilidades de Ibm
CVEs publicadas que afetam produtos de Ibm: 1567 registro(s), com severidade, exploração e correções.
I 162Aix 156Vios 155PowerVM VIOS 145Langflow OSS 142Guardium Data Protection 90Websphere Application Server 89Db2 69Security Verify Access 58Security Verify Access Container 58Verify Identity Access 58Verify Identity Access Container 58Datastage On Cloud Pak For Data 57Concert 53WebSphere Application Server - Liberty 47Financial Transaction Manager (FTM) for RedHat OpenShift 47Financial Transaction Manager 46DataPower Gateway 10.6.0 43Datapower Gateway 43DataPower Gateway 10.5.0 42DataPower Gateway 11.0.0 41DataPower Gateway 10.6CD 41Power System E1180 (9080-heu) Firmware 36Power System E1080 (9080-hex) Firmware 35Power System L1022 (9786-22h) Firmware 32Power System S1014 (9105-41b) Firmware 32Power System L1024 (9786-42h) Firmware 32Power System E1050 (9043-mrx) Firmware 32Power System S1012 (9028-21b) Firmware 32Power System S1122s (9824-22b) Firmware 32Power System S1022s (9105-22b) Firmware 32Power System S1024 (9105-42a) Firmware 32Power System E1150 (9043-mru) Firmware 32Power System S1122 (9824-22a) Firmware 32Power System S1124 (9824-42a) Firmware 32Power System S1114 (9824-41b) Firmware 32Power System L1122 (9856-22h) Firmware 32Power System L1124 (9856-42h) Firmware 32Power System S1022 (9105-22a) Firmware 32Power System H924 (9223-42s) Firmware 28
CVE-2026-16178
Alta · 7.5
CWE-787 08/10/2026
IBM DataPower Gateway Out-of-bounds Write
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation.
CVE-2026-16177
Média · 5.3
CWE-125 08/10/2026
IBM DataPower Gateway Out-of-bounds Read
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16176
Alta · 7.5
CWE-770 08/10/2026
IBM DataPower Gateway Denial of Service
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation.
CVE-2026-16170
Alta · 7.5
CWE-787 08/10/2026
IBM DataPower Gateway Out-of-bounds Write
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap buffer overflow.
CVE-2026-16169
Alta · 7.5
CWE-400 08/10/2026
IBM DataPower Gateway Denial of Service
IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-14521
Média · 4.9
CWE-918 08/10/2026
IBM DataPower Gateway affected by server-side request forgery
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2026-97680
Alta · 8.3
CWE-284 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem.
CVE-2026-97679
Alta · 8.8
CWE-94 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command ('Code Injection') related to improper input validation.
CVE-2026-97678
Alta · 8.8
CWE-693 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation.
CVE-2026-97676
Alta · 8.8
CWE-94 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code, resulting in a sandbox escape.
CVE-2026-97674
Alta · 8.1
CWE-94 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.
CVE-2026-97673
Alta · 8.8
CWE-693 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation.
CVE-2026-97671
Média · 6.5
CWE-22 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.
CVE-2026-97655
Alta · 8.8
CWE-94 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner.
CVE-2026-93679
Média · 4.3
CWE-400 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption during ZIP file extraction.
CVE-2026-93678
Alta · 7.6
CWE-639 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization.
CVE-2026-93677
Média · 6.5
CWE-200 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to exposure of sensitive information to an unauthorized actor.
CVE-2026-93675
Crítica · 9.8
CWE-440 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion.
CVE-2026-93674
Crítica · 9.8
Exploit público CWE-94 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-93449
Alta · 8.8
CWE-94 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.
CVE-2026-93448
Média · 6.5
CWE-22 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVE-2026-93447
Alta · 7.5
CWE-502 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process.
CVE-2026-93445
Alta · 8.8
CWE-94 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code.
CVE-2026-93443
Alta · 8.8
CWE-94 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code.
CVE-2026-88962
Alta · 8.8
CWE-94 06/10/2026
Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.