Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1953 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:41.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948, CVE-2015-1954, CVE-2015-1962, CVE-2015-1963, CVE-2015-1964, and CVE-2015-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.zerodayinitiative.com/advisories/ZD
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.zerodayinitiative.com/advisories/ZDI-15-273 - http://www.securityfocus.com/bid/75456 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1954 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:43.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948, CVE-2015-1953, CVE-2015-1962, CVE-2015-1963, CVE-2015-1964, and CVE-2015-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75448 - http:
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75448 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1955 State: PUBLISHED Published: 2015-08-03T19:00:00 Last Updated: 2024-08-06T05:02:43.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a crafted byte sequence in authentication data. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959205
CVE ID: CVE-2015-1956 State: PUBLISHED Published: 2015-08-03T19:00:00 Last Updated: 2024-08-06T05:02:42.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1958 and CVE-2015-1987. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959204
CVE ID: CVE-2015-1957 State: PUBLISHED Published: 2018-04-10T15:00:00 Last Updated: 2024-08-06T05:02:42.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3 allows remote authenticated users to obtain sensitive information via a man-in-the-middle attack, related to duplication of message data in cleartext outside the protected payload. IBM X-Force ID: 103482. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21960506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/103482
CVE ID: CVE-2015-1958 State: PUBLISHED Published: 2015-08-03T19:00:00 Last Updated: 2024-08-06T05:02:42.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1956 and CVE-2015-1987. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959210
CVE ID: CVE-2015-1959 State: PUBLISHED Published: 2015-06-28T15:00:00 Last Updated: 2024-08-06T05:02:43.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not properly restrict encrypted files, which allows local users to obtain sensitive information or possibly have unspecified other impact via a (1) download or (2) upload action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032734 - http://www-01.ibm.com/support/docview.wss?uid=swg21960659 - http://www.securit
tp://www.securitytracker.com/id/1032734 - http://www-01.ibm.com/support/docview.wss?uid=swg21960659 - http://www.securityfocus.com/bid/75442
CVE ID: CVE-2015-1961 State: PUBLISHED Published: 2015-07-13T16:00:00 Last Updated: 2024-08-06T05:02:41.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions and execute arbitrary JavaScript code on the server via an unspecified API call. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959052 - http://www.securitytracker.com/id/1032972 - http://www-01.ibm.com/support/docview.ws
pport/docview.wss?uid=swg21959052 - http://www.securitytracker.com/id/1032972 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR53356 - http://www.securityfocus.com/bid/75536
CVE ID: CVE-2015-1962 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:43.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948, CVE-2015-1953, CVE-2015-1954, CVE-2015-1963, CVE-2015-1964, and CVE-2015-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75454 - http:
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75454 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1963 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:42.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948, CVE-2015-1953, CVE-2015-1954, CVE-2015-1962, CVE-2015-1964, and CVE-2015-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75455 - http:
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75455 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1964 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:42.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948, CVE-2015-1953, CVE-2015-1954, CVE-2015-1962, CVE-2015-1963, and CVE-2015-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75457 - http:
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75457 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1965 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:42.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948, CVE-2015-1953, CVE-2015-1954, CVE-2015-1962, CVE-2015-1963, and CVE-2015-1964. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75458 - http:
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75458 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1966 State: PUBLISHED Published: 2015-07-04T14:00:00 Last Updated: 2024-08-06T05:02:42.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, as used in Security Access Manager for Mobile and other products, allow remote attackers to inject arbitrary web script or HTML via a crafted URL, related to the (1) ERROR_DESCRIPTION and (2) TOKEN:RelayState macros. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959071 - http://www-01.ibm.com/support/
gram Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959071 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV74198 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV74199 - http://www.securityfocus.com/bid/75537 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV74200 - http://www.securitytracker.com/id/1032767
CVE ID: CVE-2015-1967 State: PUBLISHED Published: 2015-07-01T10:00:00 Last Updated: 2024-08-06T05:02:42.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the compatibility-mode option, which allows remote attackers to obtain sensitive information by sniffing the network for a session in which TLS is not used. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032772 - http://www-01.ibm.com/support/docview.wss?uid=swg21960491
CVE ID: CVE-2015-1968 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T05:02:43.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21960244 - http://www.securityfocus.com/bid/75476
CVE ID: CVE-2015-1969 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:43.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76472 - http://www.securitytracker.com/id/1034050 - http://www-01.ibm.com/support/docview.wss?uid=swg21967384
CVE ID: CVE-2015-1970 State: PUBLISHED Published: 2015-08-03T19:00:00 Last Updated: 2024-08-06T05:02:42.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by extracting a card and attaching it elsewhere. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21962861 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT09803
CVE ID: CVE-2015-1971 State: PUBLISHED Published: 2016-01-03T00:00:00 Last Updated: 2024-08-06T05:02:42.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager (RQM) 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Team Concert (RTC) 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Requirements Composer (RRC) 2.x and 3.x before 3.0.1.6 IF7 and 4.0 through 4.0.7; Rational DOORS Next Generation (RDNG) 4.x
irements Composer (RRC) 2.x and 3.x before 3.0.1.6 IF7 and 4.0 through 4.0.7; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Engineering Lifecycle Manager (RELM) 1.0 through 1.0.0.1, 4.0.3 through 4.0.7, and 5.0 through 5.0.2; Rational Rhapsody Design Manager (DM) 3.0 through 3.0.1, 4.0 through 4.0.7, 5.0 through 5.0.2, and 6.0; and Rational Software Architect Design Manager (DM) 3.0 through 3.0.1, 4.0 through 4.0.7, and 5.0 through 5.0.2 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21971164
CVE ID: CVE-2015-1972 State: PUBLISHED Published: 2015-06-28T15:00:00 Last Updated: 2024-08-06T05:02:43.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to obtain sensitive error-log information via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032734 - http://www-01.ibm.com/support/docview.wss?uid=swg21960659 - http://www.securityfocus.com/bid/75441
CVE ID: CVE-2015-1974 State: PUBLISHED Published: 2015-06-28T15:00:00 Last Updated: 2024-08-06T05:02:42.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote authenticated users to bypass intended command restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75438 - http://www.securitytracker.com/id/1032734 - http://www-01.ibm.com/support/docview.wss?uid=swg21960659
CVE ID: CVE-2015-1975 State: PUBLISHED Published: 2018-04-03T22:00:00 Last Updated: 2024-08-06T05:02:42.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument injection. IBM X-Force ID: 103694. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/103694 - http://www-01.ibm.com/support/docview.wss?uid=swg21960659 - http://www.s
ge.xforce.ibmcloud.com/vulnerabilities/103694 - http://www-01.ibm.com/support/docview.wss?uid=swg21960659 - http://www.securityfocus.com/bid/103717
CVE ID: CVE-2015-1976 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-06T05:02:42.937Z Vendors: IBM Corporation Products: Directory Server Problem Types: Denial of Service Description: IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90526 - http://www.ibm.com/support/docview.wss?uid=swg21980585
CVE ID: CVE-2015-1977 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-06T05:02:42.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x before 6.4.0.9-ISS-ISDS-IF0009 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21986452
CVE ID: CVE-2015-1978 State: PUBLISHED Published: 2015-06-28T15:00:00 Last Updated: 2024-08-06T05:02:42.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032734 - http://www-01.ibm.com/support/docview.wss?uid=swg21960659 - http://www.securityfocus.com/bid/75435
CVE ID: CVE-2015-1979 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T05:02:42.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to the (1) addressability or (2) comments component. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959695 - http://www.securityfocus.com/bid/75538
CVE ID: CVE-2015-1980 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T05:02:42.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21960244 - http://www.securityfocus.com/bid/75143
CVE ID: CVE-2015-1981 State: PUBLISHED Published: 2015-06-28T14:00:00 Last Updated: 2024-08-06T05:02:42.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web server in IBM Domino 8.5.x before 8.5.3 FP6 IF8 and 9.x before 9.0.1 FP4, when Webmail is enabled, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH9WYPR5. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959908 - http://www.securityfocus.com/bid/74908 - http://seclists.org/fulldisclosure/2015/Jun/56 - http://www.securitytracker.com/id/1032673
CVE ID: CVE-2015-1982 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T05:02:42.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21960244 - http://www.securityfocus.com/bid/75477
CVE ID: CVE-2015-1983 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:42.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Projects page in IBM UrbanCode Build 6.1.x before 6.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21964316
CVE ID: CVE-2015-1984 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T05:02:42.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75474 - http://www-01.ibm.com/support/docview.wss?uid=swg21960244
CVE ID: CVE-2015-1985 State: PUBLISHED Published: 2016-01-03T00:00:00 Last Updated: 2024-08-06T05:02:43.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a stash file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21971445
CVE ID: CVE-2015-1986 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:43.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2015-1938. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.zerodayinitiative.com/advisories/ZDI-15-274 - http://www.securityfocus.com/bid/75461 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1987 State: PUBLISHED Published: 2015-08-03T19:00:00 Last Updated: 2024-08-06T05:02:43.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1956 and CVE-2015-1958. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21961276
CVE ID: CVE-2015-1988 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:42.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 and Tivoli Storage FlashCopy Manager for VMware 3.1 before 3.1.1.3, 3.2 before 3.2.0.6, and 4.1 before 4.1.3.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21967532
CVE ID: CVE-2015-1989 State: PUBLISHED Published: 2015-11-08T22:00:00 Last Updated: 2024-08-06T05:02:42.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21970116
CVE ID: CVE-2015-1990 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.