12960 matches found
CVE-2021-20486
IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additional plugins. IBM X-Force ID: 197668...
CVE-2021-20486
CVE-2021-20486 affects IBM Cloud Pak for Data 3.0 (CPD 3.0) and can allow an authenticated user to obtain sensitive information when CPD is installed with certain plugins (notably with Watson Knowledge Catalog/Data Virtualization add-ons). The vulnerability path is information disclosure due to m...
CVE-2021-29695
IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558...
CVE-2021-29708
IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...
CVE-2020-4839
IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037...
Code injection
IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...
Stack overflow
IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037...
Design/Logic Flaw
IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558...
CVE-2021-29708
IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...
CVE-2021-29695
CVE-2021-29695 concerns IBM Host firmware for LC-class Systems (e.g., OP820 on 8335-GCA/GTA/GTB). The vulnerability allows a remote attacker to traverse directories and delete arbitrary files by sending a specially crafted URL request. Metrics show mixed scores across CVSS versions (NVD 3.1: 6.5 ...
CVE-2021-29708
CVE-2021-29708 affects IBM Spectrum Scale CNSA 5.1.0.1. A local attacker with access to the GUI pod container could obtain sensitive cryptographic keys, enabling privilege elevation to a privileged core-pod user. The IBM bulletin confirms the vulnerability and provides a fix: upgrade to Spectrum ...
CVE-2020-4839
IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037...
CVE-2020-4839
CVE-2020-4839 affects IBM Host firmware for LC-class Systems (e.g., OP820 on 8335-GCA/GTA/GTB). The vulnerability is a stack-based buffer overflow caused by improper bounds checking, enabling a remote privileged attacker to cause a denial of service. Affected product details and CVSS scoring are ...
CVE-2021-20389
IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 195770...
CVE-2021-20426
IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196313...
CVE-2020-4990
IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...
CVE-2021-20419
IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280...
CVE-2021-20386
IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195767...
CVE-2021-20428
IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196315...