CVE Notifier

CVE-2025-36076 CWE-540 4.3

IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system.

cve.org IBM:Cognos · Analytics 1 hari lalu

CVE-2025-36045 CWE-799 4.3

TS4300 Tape Library addresses security vulnerability

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

cve.org IBM:TS4300 1 hari lalu

CVE-2025-33147 CWE-327 5.9

IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication.

cve.org IBM:Cognos · Analytics 1 hari lalu

CVE-2025-33141 CWE-497 6.5

IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.

cve.org IBM:QRadar 1 hari lalu

CVE-2026-63635 CWE-125 5.5

OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted psd with an invalid color_mode b…

cve.org AcademySoftwareFoundation:OpenImageIO 1 hari lalu

CVE-2025-15399 CWE-352 10.0

Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions …

cve.org IBM:Common · Licensing 1 hari lalu

CVE-2026-63422 CWE-122 7.8

OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A valid tiled openexr image whose width is…

cve.org AcademySoftwareFoundation:OpenImageIO 1 hari lalu

CVE-2026-63420 CWE-125 5.5

OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, An indexed psd with transparency metadata …

cve.org AcademySoftwareFoundation:OpenImageIO 1 hari lalu

CVE-2026-59181 CWE-121 6.1

OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted cineon file can supply a numbero…

cve.org AcademySoftwareFoundation:OpenImageIO 1 hari lalu

CVE-2026-59156 CWE-674 6.5

OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted fits stream containing consecuti…

cve.org AcademySoftwareFoundation:OpenImageIO 1 hari lalu

CVE-2026-59956 CWE-125 6.1

OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-…

cve.org AcademySoftwareFoundation:OpenImageIO 1 hari lalu

CVE-2026-75883 CWE-122 6.8

PPPD buffer overflow in PEAP response code

The code in pppd that formats a response to a PEAP Request packet in peap_response() copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacket_buf without checking the available space and w…

cve.org PPP · Project:ppp 1 hari lalu