Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-3989 State: PUBLISHED Published: 2019-12-11T22:38:08 Last Updated: 2024-08-04T19:26:27.747Z Vendors: n/a Products: Amazon's Blink XT2 Sync Module Problem Types: Command Injection Description: Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-51
CVE ID: CVE-2019-3990 State: PUBLISHED Published: 2019-12-03T16:55:15 Last Updated: 2024-08-04T19:26:27.642Z Vendors: n/a Products: Harbor Problem Types: User Enumeration Description: A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and information can be obtained about registered users can be obtained via the "search" functionality. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-50 - https://github.com/goharbor/harbor/security/advisories/GHSA-6qj9-33j4-rvhg
CVE ID: CVE-2019-3992 State: PUBLISHED Published: 2019-12-17T21:55:51 Last Updated: 2024-08-04T19:26:27.616Z Vendors: n/a Products: ELOG Problem Types: CWE-200 Description: ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can access the server's configuration file by sending an HTTP GET request. Amongst the configuration data, the attacker may gain access to valid admin usernames and, in older versions of ELOG, passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-53 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraprojec
.com/security/research/tra-2019-53 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2IN3FP6VXYSD4OMUCFZNOL7MKPWRQFAL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4IAS4HI24H2ERKBZTDEVJ3LEQEFWYSCT/
CVE ID: CVE-2019-3993 State: PUBLISHED Published: 2019-12-17T21:59:00 Last Updated: 2024-08-04T19:26:27.852Z Vendors: n/a Products: ELOG Problem Types: CWE-200 Description: ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-53 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2IN3FP6VXYSD4OMUCFZNOL7MKPWRQFAL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr
sage/2IN3FP6VXYSD4OMUCFZNOL7MKPWRQFAL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4IAS4HI24H2ERKBZTDEVJ3LEQEFWYSCT/
CVE ID: CVE-2019-3994 State: PUBLISHED Published: 2019-12-17T21:59:06 Last Updated: 2024-08-04T19:26:27.635Z Vendors: n/a Products: ELOG Problem Types: CWE-416 Description: ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the ELOG function retrieve_url() to use a freed variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-53 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2IN3FP6VXYSD4OMUCFZNOL7MKPWRQFAL/ -
.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2IN3FP6VXYSD4OMUCFZNOL7MKPWRQFAL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4IAS4HI24H2ERKBZTDEVJ3LEQEFWYSCT/
CVE ID: CVE-2019-3995 State: PUBLISHED Published: 2019-12-17T21:59:13 Last Updated: 2024-08-04T19:26:27.802Z Vendors: n/a Products: ELOG Problem Types: CWE-476 Description: ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-53 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2IN3FP6VXYSD4OMUCFZNOL7MKPWRQFAL/ - https://lists.fedoraproject.org/archives/list/package-announc
oraproject.org/message/2IN3FP6VXYSD4OMUCFZNOL7MKPWRQFAL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4IAS4HI24H2ERKBZTDEVJ3LEQEFWYSCT/
CVE ID: CVE-2019-3996 State: PUBLISHED Published: 2019-12-17T21:59:22 Last Updated: 2024-08-04T19:26:27.665Z Vendors: n/a Products: ELOG Problem Types: CWE-441 Description: ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-53 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2IN3FP6VXYSD4OMUCFZNOL7MKPWRQFAL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4IAS4HI24H2ERKBZTDEVJ3LEQEFWYSCT/
CVE ID: CVE-2019-3997 State: PUBLISHED Published: 2020-01-16T22:11:01 Last Updated: 2024-08-04T19:26:27.640Z Vendors: n/a Products: SimpliSafe SS3 Problem Types: Unauthenticated Keypad Pairing Vulnerability Description: Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-03
CVE ID: CVE-2019-3998 State: PUBLISHED Published: 2020-02-13T20:01:54 Last Updated: 2024-08-04T19:26:27.584Z Vendors: n/a Products: SimpliSafe SS3 Base Station Problem Types: Unauthenticated Wi-Fi Configuration Modification Description: Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to modify the Wi-Fi network the base station connects to. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-09
CVE ID: CVE-2019-3999 State: PUBLISHED Published: 2020-02-25T18:15:03 Last Updated: 2024-08-04T19:26:27.935Z Vendors: n/a Products: Druva inSync Windows Client Problem Types: Unauthenticated OS Command Injection Description: Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-12 - http://packetstormsecurity.com/files/157493/Druva-inSync-Windows-Client-6.5.2-Privilege-Escalation.html - http://packetstormsecurity.com/fi
ecurity.com/files/157493/Druva-inSync-Windows-Client-6.5.2-Privilege-Escalation.html - http://packetstormsecurity.com/files/157680/Druva-inSync-inSyncCPHwnet64.exe-RPC-Type-5-Privilege-Escalation.html
CVE ID: CVE-2019-4000 State: PUBLISHED Published: 2020-02-25T20:28:45 Last Updated: 2024-08-04T19:26:27.792Z Vendors: n/a Products: Druva inSync Mac OS Client Problem Types: Authenticated Python Code Injection Description: Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-12
CVE ID: CVE-2019-4001 State: PUBLISHED Published: 2020-03-24T21:04:36 Last Updated: 2024-08-04T19:26:27.653Z Vendors: n/a Products: Druva inSync Client Problem Types: Electron App Command Line Argument Misconfiguration Description: Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-12
CVE ID: CVE-2019-4008 State: PUBLISHED Published: 2019-02-07T16:00:00Z Last Updated: 2024-09-17T03:27:28.348Z Severity: CRITICAL (CVSS 9 CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in some URLs can result in the tokens being written to log files. IBM X-Force ID: 155626. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/155626 - http://www.securityfocus.com/bid/106961 - https://www.ibm.com/support/docview.wss?uid=ibm10869772
CVE ID: CVE-2019-4011 State: PUBLISHED Published: 2019-05-20T17:25:23.378278Z Last Updated: 2024-09-17T03:54:27.491Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/AV:N/C:L/PR:L/AC:L/I:L/A:N/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Cross-Site Scripting Description: IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155885. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm1088199
Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10881996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155885
CVE ID: CVE-2019-4012 State: PUBLISHED Published: 2019-04-15T14:55:26.514969Z Last Updated: 2024-09-16T16:38:18.575Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:L/C:L/S:U/A:L/PR:L/AV:N/AC:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: BigFix WebUI Profile Management, BigFix WebUI Software Distribution Problem Types: Data Manipulation Description: IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886. Additional Analyst Notes: - CVE Program Container: References: - http://w
the back-end database. IBM X-Force ID: 155886. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155886 - http://www.securityfocus.com/bid/108038
CVE ID: CVE-2019-4013 State: PUBLISHED Published: 2019-04-10T14:30:27.523238Z Last Updated: 2024-09-16T18:19:17.253Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AC:L/C:H/UI:R/A:H/I:H/PR:L/S:C/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: BigFix Platform Problem Types: Gain Privileges Description: IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10874666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155887 - h
http://www.ibm.com/support/docview.wss?uid=ibm10874666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155887 - http://packetstormsecurity.com/files/154747/IBM-Bigfix-Platform-9.5.9.62-Arbitary-File-Upload-Code-Execution.html
CVE ID: CVE-2019-4014 State: PUBLISHED Published: 2019-04-03T13:50:29.652995Z Last Updated: 2024-09-16T17:54:01.151Z Severity: HIGH (CVSS 8.4 CVSS:3.0/UI:N/S:U/PR:N/A:H/AC:L/C:H/AV:L/I:H/RL:O/RC:C/E:U) Vendors: IBM Products: DB2, Db2 Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 155892. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10878793 - https://exchange.xforce.ibmcloud.com/vulnerabili
References: - https://www.ibm.com/support/docview.wss?uid=ibm10878793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155892
CVE ID: CVE-2019-4015 State: PUBLISHED Published: 2019-03-11T22:00:00Z Last Updated: 2024-09-16T22:08:30.506Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 155893. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10740413 - http://www.securityfocus.com/bid/
ram Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10740413 - http://www.securityfocus.com/bid/107398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155893
CVE ID: CVE-2019-4016 State: PUBLISHED Published: 2019-03-11T22:00:00Z Last Updated: 2024-09-17T01:20:43.801Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 155894. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/155894 - https://www.ibm.com/support/d
ram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/155894 - https://www.ibm.com/support/docview.wss?uid=ibm10740413 - http://www.securityfocus.com/bid/107398
CVE ID: CVE-2019-4027 State: PUBLISHED Published: 2019-03-05T18:00:00Z Last Updated: 2024-09-16T20:31:25.043Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 155905. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1
M X-ForceID: 155905. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155905 - https://www.ibm.com/support/docview.wss?uid=ibm10874246
CVE ID: CVE-2019-4028 State: PUBLISHED Published: 2019-03-05T18:00:00Z Last Updated: 2024-09-17T02:52:32.605Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155906. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/
M X-Force ID: 155906. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107223 - https://www.ibm.com/support/docview.wss?uid=ibm10874246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155906
CVE ID: CVE-2019-4029 State: PUBLISHED Published: 2019-03-05T18:00:00Z Last Updated: 2024-09-16T18:33:20.281Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 155907. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/
M X-force ID: 155907. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155907 - https://www.ibm.com/support/docview.wss?uid=ibm10874246
CVE ID: CVE-2019-4030 State: PUBLISHED Published: 2019-03-06T20:00:00Z Last Updated: 2024-09-16T22:30:35.787Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155946. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.
X-Force ID: 155946. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10869406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155946
CVE ID: CVE-2019-4031 State: PUBLISHED Published: 2019-10-16T12:45:17.911213Z Last Updated: 2024-09-17T03:32:52.305Z Severity: HIGH (CVSS 8.4 CVSS:3.0/PR:N/AC:L/AV:L/A:H/I:H/UI:N/C:H/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Workload Scheduler Distributed Problem Types: Gain Privileges Description: IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to write files as root in the file system, which could allow the attacker to gain root privileges. IBM X-Force ID: 155997. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1076775 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ainer: References: - https://www.ibm.com/support/pages/node/1076775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155997
CVE ID: CVE-2019-4032 State: PUBLISHED Published: 2019-03-05T18:00:00Z Last Updated: 2024-09-17T02:32:28.607Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Financial Transaction Manager Problem Types: Data Manipulation Description: IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-ForceID: 155998. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?ui
ceID: 155998. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10869520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155998
CVE ID: CVE-2019-4033 State: PUBLISHED Published: 2019-04-25T14:36:43.418441Z Last Updated: 2024-09-17T04:14:34.790Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/C:L/AC:L/S:C/PR:L/A:N/AV:N/UI:R/RL:O/RC:C/E:H) Vendors: IBM Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155999. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ib
155999. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10869046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/155999
CVE ID: CVE-2019-4034 State: PUBLISHED Published: 2019-03-14T23:00:00Z Last Updated: 2024-09-17T01:35:53.569Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Content Navigator Problem Types: Gain Access Description: IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation. When editing an executable file in ICN with Edit service, it will be executed on the user's workstation. IBM X-Force ID: 156000. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107426 - https://www.ibm.com/support/docview.wss?uid=ibm10869066 - https://exchange.xforc
tp://www.securityfocus.com/bid/107426 - https://www.ibm.com/support/docview.wss?uid=ibm10869066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156000
CVE ID: CVE-2019-4035 State: PUBLISHED Published: 2019-03-22T18:50:21.369442Z Last Updated: 2024-09-16T17:38:24.121Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/UI:N/PR:L/AC:L/S:U/AV:N/C:L/I:L/RL:O/E:U/RC:C) Vendors: IBM Products: Content Navigator Problem Types: Gain Access Description: IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If attackers make a fake IBM Content Navigator site, they can send a link to ICN users to send request to their Edit client directly. Then Edit client will download documents from the fake ICN website. IBM X-Force ID: 156001. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docv
IBM X-Force ID: 156001. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10869060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156001 - http://www.securityfocus.com/bid/107557
CVE ID: CVE-2019-4036 State: PUBLISHED Published: 2019-10-25T16:30:34.688Z Last Updated: 2025-02-13T16:27:25.362Z Severity: HIGH (CVSS 7.5 CVSS:3.0/S:U/C:N/UI:N/A:H/PR:N/AV:N/AC:L/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Access Manager Problem Types: Denial of Service Description: IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse proxy component. IBM X-Force ID: 156159. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1072704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156159
CVE ID: CVE-2019-4038 State: PUBLISHED Published: 2019-02-04T21:00:00Z Last Updated: 2024-09-17T03:28:30.821Z Severity: HIGH (CVSS 7.2 CVSS:3.0/A:H/AC:L/AV:P/C:H/I:H/PR:H/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Gain Access Description: IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness can result in a limited form of code injection. IBM X-Force ID: 156162. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/156162 - https://www.ibm.c
: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/156162 - https://www.ibm.com/support/docview.wss?uid=ibm10869604