Filtered by vendor Ibm
Subscriptions
Total
7864 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2007-6293 | 1 Ibm | 1 Hardware Management Console | 2025-04-09 | N/A |
Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow attackers to gain privileges via "some HMC commands." | ||||
CVE-2007-6294 | 1 Ibm | 1 Hardware Management Console | 2025-04-09 | N/A |
Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges via "some HMC commands." | ||||
CVE-2007-6295 | 1 Ibm | 1 Lotus Sametime | 2025-04-09 | N/A |
Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI. | ||||
CVE-2007-6407 | 1 Ibm | 1 Tivoli Provisioning Manager Express | 2025-04-09 | N/A |
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Provisioning Manager Express allow remote attackers to inject arbitrary web script or HTML via the (1) "assess modification," (2) user-id, and other unspecified fields to the /tpmx URI; or (3) involving unspecified vectors related to "error processing." | ||||
CVE-2007-6408 | 1 Ibm | 1 Tivoli Provisioning Manager Express | 2025-04-09 | N/A |
IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when (1) attempted duplication of a username occurs when creating an account or (2) when trying to login using a valid username, which makes it easier for remote attackers to enumerate usernames. | ||||
CVE-2007-6717 | 1 Ibm | 1 Aix | 2025-04-09 | N/A |
Buffer overflow in tftp in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to gain privileges via unspecified vectors. | ||||
CVE-2008-1288 | 1 Ibm | 1 Rational Clearquest | 2025-04-09 | N/A |
IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies. | ||||
CVE-2008-0354 | 1 Ibm | 1 Lotus Sametime | 2025-04-09 | N/A |
Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim. | ||||
CVE-2008-0368 | 1 Ibm | 1 Informix Dynamic Server | 2025-04-09 | N/A |
onedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument. | ||||
CVE-2008-0509 | 1 Ibm | 1 Aix | 2025-04-09 | N/A |
Multiple buffer overflows in IBM AIX 4.3 allow remote attackers to cause a denial of service (crash) or possibly gain privileges via a long argument to (1) piox25, related to piox25.c; or (2) piox25remote, related to piox25remote.sh. | ||||
CVE-2008-0584 | 1 Ibm | 1 Aix | 2025-04-09 | N/A |
Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) swap, (2) swapoff, and (3) swapon programs. | ||||
CVE-2008-0585 | 1 Ibm | 1 Aix | 2025-04-09 | N/A |
sysmgt.websm.webaccess in IBM AIX 5.2 and 5.3 has world writable permissions for unspecified WebSM Remote Client files, which allows local users to "alter the behavior of" this client by overwriting these files. | ||||
CVE-2008-0717 | 1 Ibm | 1 Websphere Edge Server | 2025-04-09 | N/A |
Cross-site scripting (XSS) vulnerability in Caching Proxy (CP) 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response. | ||||
CVE-2008-0727 | 1 Ibm | 1 Informix Dynamic Server | 2025-04-09 | N/A |
Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value. | ||||
CVE-2008-0740 | 1 Ibm | 1 Websphere Application Server | 2025-04-09 | N/A |
IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file. | ||||
CVE-2008-0741 | 1 Ibm | 1 Websphere Application Server | 2025-04-09 | N/A |
Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) has unknown impact and attack vectors. | ||||
CVE-2008-0861 | 1 Ibm | 1 Lotus Quickplace | 2025-04-09 | N/A |
Cross-site scripting (XSS) vulnerability in leg/Main.nsf in IBM Lotus Quickplace 7.0 allows remote attackers to inject arbitrary web script or HTML via an h_SearchString sub-parameter in the PreSetFields parameter of an EditDocument action. | ||||
CVE-2008-0862 | 1 Ibm | 1 Lotus Notes | 2025-04-09 | N/A |
IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, which allows user-assisted remote attackers to bypass Execution Control List (ECL) protection. | ||||
CVE-2008-1130 | 1 Ibm | 1 Websphere Mq | 2025-04-09 | N/A |
Unspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 allows attackers to bypass access restrictions for a queue manager via a SVRCONN (MQ client) channel. | ||||
CVE-2008-1274 | 1 Ibm | 1 Aix | 2025-04-09 | N/A |
Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory. |