12960 matches found
CVE-2018-1853
IBM Spectrum Protect (formerly Tivoli Storage Manager) Backup-Archive Client is affected by CVE-2018-1853, a clickjacking vulnerability in the Client Web Interface. A remote attacker could lure a victim to a malicious site to hijack the victim’s click actions, with the potential for further abuse...
CVE-2018-1885
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020...
CVE-2018-1787
CVE-2018-1787 affects IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments on Windows. The root cause is insecure file permissions that expose passwords. Affected products/versions include Backup-Archive Client 7.1.x (7.1.8.0–7.1.8.4) and 8.1.x (8.1.2.0–8.1...
Cross site scripting
IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2019-4014
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 155892...
Stack overflow
IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 153316...
CVE-2018-1913
IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2018-1936
IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 153316...
CVE-2018-1731
IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2019-4014
CVE-2019-4014 affects IBM DB2 for Linux, UNIX and Windows (including DB2 Connect Server) across 9.7, 10.1, 10.5 and 11.1. Description: a buffer overflow could allow an authenticated local attacker to execute arbitrary code on the system as root. Impact: local code execution with root privileges. ...
CVE-2018-1731
IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2018-1936
IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 153316...
CVE-2018-1913
Summary: CVE-2018-1913 affects IBM DOORS Next Generation (DNG/RRC) 5.0–5.0.3 and 6.0–6.0.6, with a cross-site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript and potentially expose credentials within a trusted session. The root cause involves insufficient input...
CVE-2018-1731
CVE-2018-1731 affects IBM DOORS Next Generation (DNG/RRC) 5.0–5.0.3 and 6.0–6.0.6. The issue is a cross-site scripting flaw in the Web UI that can cause arbitrary JavaScript execution, potentially leading to credentials disclosure within a trusted session. Affected versions are explicitly listed ...
CVE-2019-4093
IBM Tivoli Storage Manager IBM Spectrum Protect 8.1.7 could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User Interface on Windows that they should not have access to due to incorrect file permissions. IBM X-Force ID: 157981...
CVE-2019-4043
IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239...
CVE-2019-4080
IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380...
Improper access control
IBM Tivoli Storage Manager IBM Spectrum Protect 8.1.7 could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User Interface on Windows that they should not have access to due to incorrect file permissions. IBM X-Force ID: 157981...
Design/Logic Flaw
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 144410...
Xxe
IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239...