Lucene search
+L

1096 matches found

NVD
NVD
•added 2016/10/22 3:59 a.m.•27 views

CVE-2016-0326

IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."...

8.8CVSS8.6AI score0.01348EPSS
SaveExploits0References2
OSV
OSV
•added 2016/10/22 3:59 a.m.•15 views

CVE-2016-0326

IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."...

8.8CVSS6AI score0.01348EPSS
SaveExploits0References2
Prion
Prion
•added 2016/10/22 3:59 a.m.•27 views

Design/Logic Flaw

IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."...

6.5CVSS7.5AI score0.01348EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2016/10/22 1:00 a.m.•63 views

CVE-2016-0326

Summary: IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (CLM) are affected by a command injection vulnerability (CVE-2016-0326). An authenticated attacker can inject commands via a specially crafted HTML request, causing OS commands to execute with the user’s p...

8.8CVSS8.5AI score0.01348EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2016/10/22 1:00 a.m.•36 views

CVE-2016-0326

IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."...

8.6AI score0.01348EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/22 12:00 a.m.•4 views

CVE-2016-0326: Improper Neutralization of Special Elements used in a Command

IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."...

8.8CVSS6.3AI score0.01348EPSS
SaveExploits0References2
CNVD
CNVD
•added 2016/10/20 12:00 a.m.•21 views

IBM Jazz Foundation Information Disclosure Vulnerability (CNVD-2016-10072)

IBM Rational Collaborative Lifecycle Management CLM, etc. are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager are collaborative lifecycle management solutions; Rational Quality Manager RQM is a collaborative, Web-based...

4CVSS6AI score0.00826EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/10/17 12:00 a.m.•10 views

SQL Injection Vulnerability in VOA (Pengwei) System RelationID Parameter

Shenzhen Pengwei Information Technology Co., Ltd VOA collaborative office platform is a kind of asp development OA system. VOA Pengwei system relationID parameter exists SQL injection vulnerability, the vulnerability URL is...

7.8AI score
SaveExploits0References1
CNVD
CNVD
•added 2016/09/21 12:00 a.m.•18 views

IBM Rational Quality Manager and Collaborative Lifecycle Management Command Injection Vulnerability

IBM Rational Quality Manager RQM and Collaborative Lifecycle Management CLM are both products of IBM Corporation. The former is a set of collaborative, Web-based quality management solutions, the latter is a set of collaborative lifecycle management solutions. A command injection vulnerability...

8.8CVSS7.3AI score0.01348EPSS
SaveExploits0References1
NVD
NVD
•added 2016/09/12 10:59 a.m.•34 views

CVE-2016-0331

Cross-site scripting XSS vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.4CVSS5AI score0.00802EPSS
SaveExploits0References3
Prion
Prion
•added 2016/09/12 10:59 a.m.•25 views

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

3.5CVSS5.4AI score0.00802EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2016/09/12 10:00 a.m.•39 views

CVE-2016-0331

Cross-site scripting XSS vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5AI score0.00802EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/09/12 12:00 a.m.•4 views

CVE-2016-0331: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.4CVSS6AI score0.00802EPSS
SaveExploits0References2
CNVD
CNVD
•added 2016/09/09 12:00 a.m.•19 views

Cross-site scripting vulnerability in multiple IBM products (CNVD-2016-07415)

IBM Rational Collaborative Lifecycle Management CLM and others are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager are collaborative lifecycle management solutions. Manager are collaborative lifecycle management...

5.4CVSS6.6AI score0.00615EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/09/08 12:00 a.m.•16 views

IBM Rational Team Concert and Rational Collaborative Lifecycle Management Cross-Site Scripting Vulnerability

IBM Rational Team Concert RTC and Rational Collaborative Lifecycle Management CLM are both collaborative lifecycle management solutions from IBM USA. A cross-site scripting vulnerability exists in IBM RTC and Rational CLM versions 6.0.1 through 6.0.2. Due to the program failing to adequately filt...

5.4CVSS6.9AI score0.00802EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/08/27 12:00 a.m.•6 views

SQL Injection Vulnerability in the VoteId Parameter of Hopping Collaborative Content Management System (CCMS)

HZCMS is a website group content management system based on Java and XML technology. A SQL injection vulnerability exists in the voteId parameter of the HZCMS. An attacker can exploit the vulnerability to obtain database information...

8AI score
SaveExploits0References1
CNVD
CNVD
•added 2016/08/27 12:00 a.m.•10 views

SQL Injection Vulnerability in the adid Parameter of Hopping Collaborative Content Management System (CCMS)

HZCMS is a website group content management system based on Java and XML technology. A SQL injection vulnerability exists in the adid parameter of the HZCMS. An attacker can exploit the vulnerability database information...

8AI score
SaveExploits0References1
The Hacker News
The Hacker News
•added 2016/08/24 6:37 a.m.•15 views

Happy Birthday! LINUX Turns 25 Years Old Today

Linux has turned 25! Dear all, today is August 25, 2016, and it is time for the celebration, as it's the 25th Anniversary of the Linux project, announced by its creator, Finnish programmer Linus Torvalds, on August 25, 1991. Who can forget one of the most famous messages in the computing world...

6.7AI score
SaveExploits0
seebug.org
seebug.org
•added 2016/07/25 12:00 a.m.•27 views

Thousand OA collaborative office management platform govdocumentmanager_judge. jsp numId parameter sql injection vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2016/07/25 12:00 a.m.•20 views

Thousand OA collaborative office management platform GovReceiveFileAction. do RecordID parameter id injection vulnerability

No description provided by source...

7.1AI score
SaveExploits0
Rows per page
Query Builder