Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-0350 State: PUBLISHED Published: 2016-07-08T01:00:00 Last Updated: 2024-08-05T22:15:24.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2888 and CVE-2016-0313. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE ID: CVE-2016-0351 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-05T22:15:24.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set the secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. IBM X-Force ID: 111890. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21989198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111890
CVE ID: CVE-2016-0353 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-05T22:15:23.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94543 - http://www-01.ibm.com/support/docview.wss?uid=swg21988706
CVE ID: CVE-2016-0354 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-16T22:51:11.973Z Vendors: IBM Products: Sametime Problem Types: Gain Access Description: IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload a malicious file to a Sametime meeting room, that could be downloaded by unsuspecting users which could be executed with user privileges. IBM X-Force ID: 111893. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100599 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
d/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111893
CVE ID: CVE-2016-0355 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-16T21:02:57.189Z Vendors: IBM Products: Sametime Problem Types: Denial of Service Description: IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111894. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111894 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439
CVE ID: CVE-2016-0356 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-16T17:58:48.073Z Vendors: IBM Products: Sametime Problem Types: Denial of Service Description: IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111895. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100599 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111895
CVE ID: CVE-2016-0357 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-05T22:15:24.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985736 - http://www.securityfocus.com/bid/87528 - http://www.securitytracker.com/id/1036255
CVE ID: CVE-2016-0358 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-16T22:09:37.964Z Vendors: IBM Products: Sametime Problem Types: Gain Access Description: IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to. IBM X-Force ID: 111928. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006441 - http://www.securityfocus.com/bid/100572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111928
CVE ID: CVE-2016-0359 State: PUBLISHED Published: 2016-07-03T21:00:00 Last Updated: 2024-08-05T22:15:24.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 Full before 8.5.5.10, and 8.5 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91484 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI58918 - http://www.securitytracker.com/id/1036184 - http://www-01.
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI58918 - http://www.securitytracker.com/id/1036184 - http://www-01.ibm.com/support/docview.wss?uid=swg21982526
CVE ID: CVE-2016-0360 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-05T22:15:24.270Z Vendors: IBM Corporation Products: WebSphere MQ Problem Types: Gain Access Description: IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allow a malicious user to execute arbitrary Java code by adding vulnerable classes to the classpath. IBM Reference #: 1983457. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95317 - http://www-01.ibm.com/support/docview.wss?uid=swg21983457 - http://www.securitytracker.com/id/1037561
CVE ID: CVE-2016-0361 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T22:15:24.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMIN passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036455 - http://www-01.ibm.com/support/docview.wss?uid=swg21986595 - http://www.securityfocus.com/bid/90550
CVE ID: CVE-2016-0362 State: PUBLISHED Published: 2016-07-01T01:00:00 Last Updated: 2024-08-05T22:15:24.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and trigger network traffic to arbitrary intranet or Internet hosts, via a crafted proxy request to a web service. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980749
CVE ID: CVE-2016-0363 State: PUBLISHED Published: 2016-06-03T14:00:00 Last Updated: 2024-08-05T22:15:24.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHa
dbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3009. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980826 - http://www.securityfocus.com/bid/85895 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html - http://rhn.redhat.com/errata/RHSA-2016-1039.html - http://rhn.redhat.com/errata/RHSA-2016-0701.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/
use.org/opensuse-security-announce/2016-05/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html - https://access.redhat.com/errata/RHSA-2016:1430 - http://www.security-explorations.com/materials/SE-2012-01-IBM-4.pdf - http://rhn.redhat.com/errata/RHSA-2016-0708.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html - http://seclists.org/fulldisclosure/2016/Apr/20 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html - http://rhn.redhat.com/errata/RHSA-20
r/20 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html - http://rhn.redhat.com/errata/RHSA-2016-0716.html - http://www.securitytracker.com/id/1035953 - http://seclists.org/fulldisclosure/2016/Apr/3 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html - http://rhn.redhat.com/errata/RHSA-2016-0702.html - https://access.redhat.com/errata/RHSA-2017:1216 - http://www-01.ibm.com/support/docview.wss?uid=swg1IX90172
CVE ID: CVE-2016-0364 State: PUBLISHED Published: 2016-07-01T01:00:00 Last Updated: 2024-08-05T22:15:24.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg2C1000152
CVE ID: CVE-2016-0365 State: PUBLISHED Published: 2016-07-01T01:00:00 Last Updated: 2024-08-05T22:15:24.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg2C1000149 - http://www.securityfocus.com/bid/91526
CVE ID: CVE-2016-0366 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-05T22:15:24.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 might allow remote attackers to obtain sensitive information by leveraging weak encryption. IBM X-Force ID: 112071. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21986260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/112071
CVE ID: CVE-2016-0367 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-05T22:15:24.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 112072. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/112072 - http://www-01.ibm.com/support/docview.wss?uid=swg21989198
CVE ID: CVE-2016-0369 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-05T22:15:24.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 112088. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/112088 - http://www-01.ibm.com/support/docview.wss?uid=swg21988727
CVE ID: CVE-2016-0370 State: PUBLISHED Published: 2016-09-01T01:00:00 Last Updated: 2024-08-05T22:15:24.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988726 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO88449 - http://www.securityfocus.com/bid/92471 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO88451
CVE ID: CVE-2016-0371 State: PUBLISHED Published: 2017-02-01T21:00:00 Last Updated: 2024-08-05T22:15:24.293Z Vendors: IBM Corporation Products: Tivoli Storage Manager Problem Types: Obtain Information Description: The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94148 - http://www-01.ibm.com/support/docview.wss?uid=swg21985114
CVE ID: CVE-2016-0372 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-05T22:15:24.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecyc
xt Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References:
by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991478 - http://www.securityfocus.com/bid/94541
CVE ID: CVE-2016-0373 State: PUBLISHED Published: 2018-08-30T16:00:00Z Last Updated: 2024-09-16T17:08:27.683Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST endpoints not properly authorizing users when determining who can read data. IBM X-Force ID: 112119. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg2C1000219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/112119
CVE ID: CVE-2016-0374 State: PUBLISHED Published: 2016-07-01T01:00:00 Last Updated: 2024-08-05T22:15:24.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain privileges for application modification via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981729
CVE ID: CVE-2016-0375 State: PUBLISHED Published: 2016-07-01T01:00:00 Last Updated: 2024-08-05T22:15:24.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2.0.0.0 allows remote authenticated users to obtain administrator privileges for executing arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985064 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT15743 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT15674
CVE ID: CVE-2016-0376 State: PUBLISHED Published: 2016-06-03T14:00:00 Last Updated: 2024-08-05T22:15:24.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which
code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980826 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html - http://rhn.redhat.com/errata/RHSA-2016-1039.html - http://rhn.redhat.com/errata/RHSA-2016-0701.html - http://www.securityfocus.com/bid/89192 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html - http://lists.opensuse.o
cus.com/bid/89192 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html - https://access.redhat.com/errata/RHSA-2016:1430 - http://rhn.redhat.com/errata/RHSA-2016-0708.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html - http://seclists.org/fulldisclosure/2016/Apr/43 - http://rhn.redhat.com/errata/RHSA-2016-0716.html - http://www.securi
- http://seclists.org/fulldisclosure/2016/Apr/43 - http://rhn.redhat.com/errata/RHSA-2016-0716.html - http://www.securitytracker.com/id/1035953 - http://www.security-explorations.com/materials/SE-2012-01-IBM-5.pdf - http://www-01.ibm.com/support/docview.wss?uid=swg1IX90171 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html - http://rhn.redhat.com/errata/RHSA-2016-0702.html - https://access.redhat.com/errata/RHSA-2017:1216 - http://www.securityfocus.com/archive/1/538066/100/100/threaded
CVE ID: CVE-2016-0377 State: PUBLISHED Published: 2016-10-22T01:00:00 Last Updated: 2024-08-05T22:15:24.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036653 - http://www.securityfocus.com/bid/92514 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI56917 - http://www-01.ibm.com/support/docview.wss?uid=swg2198064
4 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI56917 - http://www-01.ibm.com/support/docview.wss?uid=swg21980645
CVE ID: CVE-2016-0378 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-05T22:15:24.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the installation lacks a default error page, allows remote attackers to obtain sensitive information by triggering an exception. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93143 - http://www-01.ibm.com/support/docview.wss?uid=swg21981529 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI54459
CVE ID: CVE-2016-0379 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-05T22:15:24.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which allows remote authenticated users to cause a denial of service (channel outage) by leveraging queue-manager rights. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21984565 - http://www.securityfocus.com/bid/93146
CVE ID: CVE-2016-0380 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T22:15:24.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92336 - http://www-01.ibm.com/support/docview.wss?uid=swg21988278 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT14769
CVE ID: CVE-2016-0381 State: PUBLISHED Published: 2016-05-15T01:00:00 Last Updated: 2024-08-05T22:15:24.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty, allows remote authenticated users to cause a denial of service (configuration outage) via a non-empty value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035930 - http://www-01.ibm.com/support/docview.wss?uid=swg21981936