Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1921 State: PUBLISHED Published: 2015-05-25T00:00:00 Last Updated: 2024-08-06T05:02:41.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI38632 - http://www-01.ibm.com/support/docview.wss?uid=swg21884060 - http://www.securityfocus.com/bid/74705
CVE ID: CVE-2015-1922 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T05:02:41.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959650 - http://www.securityfocus.com/bid/75911 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08524 - http://www-01.ibm.com/support/docview.wss
us.com/bid/75911 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08524 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08523 - http://www.securitytracker.com/id/1032879 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08525 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08526
CVE ID: CVE-2015-1923 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:41.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75445 - http://www.zerodayinitiative.com/advisories/ZDI-15-264 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1924 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:41.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948, CVE-2015-1953, CVE-2015-1954, CVE-2015-1962, CVE-2015-1963, CVE-2015-1964, and CVE-2015-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75447 - http:
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75447 - http://www.zerodayinitiative.com/advisories/ZDI-15-267 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1925 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:41.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948, CVE-2015-1953, CVE-2015-1954, CVE-2015-1962, CVE-2015-1963, CVE-2015-1964, and CVE-2015-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75449 - http:
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75449 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398 - http://www.zerodayinitiative.com/advisories/ZDI-15-266
CVE ID: CVE-2015-1926 State: PUBLISHED Published: 2015-07-16T10:00:00 Last Updated: 2024-08-06T05:02:41.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications Framework component in Oracle E-Business Suite 12.2.3 and 12.2.4, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Portal. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.securitytracker.com/id/1032926 - http://www.securit
com/technetwork/topics/security/cpujul2015-2367936.html - http://www.securitytracker.com/id/1032926 - http://www.securityfocus.com/bid/75860
CVE ID: CVE-2015-1927 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T05:02:41.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of IBM WebSphere Application Server (WAS) 7.0.0 before 7.0.0.39, 8.0.0 before 8.0.0.11, and 8.5 before 8.5.5.6 has a false value for the com.ibm.ws.webcontainer.disallowServeServletsByClassname WebContainer property, which allows remote attackers to obtain privileged access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963275 - http://www-01.ibm.com/support/docview.wss?uid=swg21959083 - http://www-01.ibm.com
/support/docview.wss?uid=swg21963275 - http://www-01.ibm.com/support/docview.wss?uid=swg21959083 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI31622 - http://www.securityfocus.com/bid/75486 - http://www.securitytracker.com/id/1033383
CVE ID: CVE-2015-1928 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T05:02:41.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4; Rational Quality Manager (RQM) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Team Concert (RTC) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS Next Gener
0.0 IF4; Rational Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Engineering Lifecycle Manager (RELM) 4.0.3 through 4.0.7, 5.0 through 5.0.2, and 6.0.0; Rational Rhapsody Design Manager (DM) 4.0 through 4.0.7, 5.0 through 5.0.2, and 6.0.0; and Rational Software Architect Design Manager (DM) 4.0 through 4.0.7, 5.0 through 5.0.2, and 6.0.0 allows remote authenticated users to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034568 - http://www-01
ditional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034568 - http://www-01.ibm.com/support/docview.wss?uid=swg21973200 - http://www.securitytracker.com/id/1034566 - http://www.securitytracker.com/id/1034565 - http://www.securitytracker.com/id/1034567
CVE ID: CVE-2015-1929 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:42.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1930, CVE-2015-1948, CVE-2015-1953, CVE-2015-1954, CVE-2015-1962, CVE-2015-1963, CVE-2015-1964, and CVE-2015-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75451 - http:
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75451 - http://www.zerodayinitiative.com/advisories/ZDI-15-263 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1930 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:41.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1948, CVE-2015-1953, CVE-2015-1954, CVE-2015-1962, CVE-2015-1963, CVE-2015-1964, and CVE-2015-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.zerodayinitiative.com/advisories/ZD
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.zerodayinitiative.com/advisories/ZDI-15-265 - http://www.securityfocus.com/bid/75452 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1931 State: PUBLISHED Published: 2020-01-23T18:42:52 Last Updated: 2024-08-06T05:02:42.523Z Vendors: n/a Products: n/a Problem Types: Other Description: IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html - http://www-01.ibm.com/support/docview.wss?uid=swg21962302 - http://rhn.redha
e-security-announce/2015-09/msg00014.html - http://www-01.ibm.com/support/docview.wss?uid=swg21962302 - http://rhn.redhat.com/errata/RHSA-2015-1485.html - http://rhn.redhat.com/errata/RHSA-2015-1486.html - http://rhn.redhat.com/errata/RHSA-2015-1488.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV75182 - http://rhn.redhat.com/errata/RHSA-2015-1544.html - http://rhn.redhat.com/errata/RHSA-2015-1604.html - http://www.securityfocus.com/bid/75985 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html
CVE ID: CVE-2015-1932 State: PUBLISHED Published: 2015-08-22T23:00:00 Last Updated: 2024-08-06T05:02:42.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963275 - http://www.securitytracker.com/id/1033325 - http://www.securityfocus.com/bid/76466 - http://www-01.ibm.com/support/docview.wss
/www.securitytracker.com/id/1033325 - http://www.securityfocus.com/bid/76466 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI38403
CVE ID: CVE-2015-1933 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:41.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX001 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not have an off autocomplete attribute for the password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Ana
eld, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21965080
CVE ID: CVE-2015-1934 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:41.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX002, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX002 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not properly encrypt passwords, which makes it easier for context-dependent attackers to determine cleartext passwords by leveraging access to a password file. Additional Analyst
context-dependent attackers to determine cleartext passwords by leveraging access to a password file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21964855
CVE ID: CVE-2015-1935 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T05:02:42.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75908 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08543 - http://www-01.ibm.com/support/docview.wss?uid=swg21902661 - http://www.securitytracker.com/id/1033063 - http://www-
43 - http://www-01.ibm.com/support/docview.wss?uid=swg21902661 - http://www.securitytracker.com/id/1033063 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08656 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08668 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08667
CVE ID: CVE-2015-1936 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T05:02:41.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative console in IBM WebSphere Application Server (WAS) 8.0.0 before 8.0.0.11 and 8.5 before 8.5.5.6, when the Security feature is disabled, allows remote authenticated users to hijack sessions via the JSESSIONID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959083 - http://www.securityfocus.com/bid/75480 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI37230
CVE ID: CVE-2015-1937 State: PUBLISHED Published: 2015-05-30T19:00:00 Last Updated: 2024-08-06T05:02:41.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM PowerVC 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 does not require authentication for the ceilometer NoSQL database, which allows remote attackers to read or write to arbitrary database records, and consequently obtain administrator privileges, via a session on port 27017. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020731 - http://www.securityfocus.com/bid/74911 - http://www-01.ibm.com/support/docview.wss?uid=swg1I
view.wss?uid=nas8N1020731 - http://www.securityfocus.com/bid/74911 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08806
CVE ID: CVE-2015-1938 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:41.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2015-1986. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75444 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398 - http://www.zerodayinitiative.com/advisories/ZDI-15-272
CVE ID: CVE-2015-1941 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:41.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to read arbitrary files via a crafted TCP packet to an unspecified port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.zerodayinitiative.com/advisories/ZDI-15-268 - http://www.securityfocus.com/bid/75446 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1942 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:43.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to write to arbitrary files, and subsequently execute these files, via a crafted TCP packet to an unspecified port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75450 - http://www.zerodayinitiative.com/advisories/ZDI-15-269 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1943 State: PUBLISHED Published: 2015-09-14T22:00:00 Last Updated: 2024-08-06T05:02:42.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI39617 - http://www-01.ibm.com/support/docview.wss?uid=swg21962567 - http://www.securitytracker.com/id/1033444
CVE ID: CVE-2015-1944 State: PUBLISHED Published: 2015-07-14T14:00:00 Last Updated: 2024-08-06T05:02:41.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032970 - http://www.securityfocus.com/bid/75478 - http://www-01.ibm.com/support/docview.wss?uid=swg21958024 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI40341
CVE ID: CVE-2015-1945 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T05:02:43.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21957776 - http://www.securityfocus.com/bid/74929
CVE ID: CVE-2015-1946 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T05:02:41.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user roles, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI35180 - http://www-01.ibm.com/support/docview.wss?uid=swg21959083 - http://www.securityfocus.com/bid/75496
CVE ID: CVE-2015-1947 State: PUBLISHED Published: 2015-12-31T16:00:00 Last Updated: 2024-08-06T05:02:42.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan horse library that is loaded by a setuid or setgid program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034562 - http://www.securitytracker.com/id/1034537 - http://www-304.ibm.com/support/docview.wss?uid=swg21970376 - http://www-01.ibm.com/support/docview.wss?uid=swg21967131 - http://www.securityf
m/support/docview.wss?uid=swg21970376 - http://www-01.ibm.com/support/docview.wss?uid=swg21967131 - http://www.securityfocus.com/bid/79693
CVE ID: CVE-2015-1948 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:42.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1953, CVE-2015-1954, CVE-2015-1962, CVE-2015-1963, CVE-2015-1964, and CVE-2015-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75453 - http:
gram Container: References: - http://www.securitytracker.com/id/1032773 - http://www.securityfocus.com/bid/75453 - http://www.zerodayinitiative.com/advisories/ZDI-15-270 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398
CVE ID: CVE-2015-1949 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T05:02:41.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands with SYSTEM privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032773 - http://www.zerodayinitiative.com/advisories/ZDI-15-271 - http://www-01.ibm.com/support/docview.wss?uid=swg21959398 - http://www.securityfocus.com/bid/75459
CVE ID: CVE-2015-1950 State: PUBLISHED Published: 2015-07-01T10:00:00 Last Updated: 2024-08-06T05:02:42.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020740 - http://www.securityfocus.com/bid/75102 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08926
CVE ID: CVE-2015-1951 State: PUBLISHED Published: 2015-07-01T10:00:00 Last Updated: 2024-08-06T05:02:43.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.0 IFIX005 does not prevent caching of HTTPS responses, which allows physically proximate attackers to obtain sensitive local-cache information by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75340 - http://www-01.ibm.com/support/docview.wss?uid=swg21959613
CVE ID: CVE-2015-1952 State: PUBLISHED Published: 2018-04-16T17:00:00 Last Updated: 2024-08-06T05:02:42.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM AppScan Enterprise Edition 9.0.x before 9.0.2 iFix 001 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 103416. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/103416 - http://www-01.ibm.com/support/docview.wss?uid=swg21883124