Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1751 State: PUBLISHED Published: 2019-01-23T16:00:00Z Last Updated: 2024-09-16T18:34:37.118Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Security Key Lifecycle Manager 3.0 through 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 148512. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10791829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148512 - http://www.securit
m/support/docview.wss?uid=ibm10791829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148512 - http://www.securityfocus.com/bid/106734
CVE ID: CVE-2018-1753 State: PUBLISHED Published: 2018-10-08T15:00:00Z Last Updated: 2024-09-16T16:33:33.179Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 148514. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148514
CVE ID: CVE-2018-1755 State: PUBLISHED Published: 2018-08-24T11:00:00Z Last Updated: 2024-09-16T20:16:23.720Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by incorrect transport being used when Liberty is configured to use Java Authentication SPI for Containers (JASPIC). This can happen when the Application Server is configured to permit access on non-secure (http) port and using JASPIC or JSR375 authentication. Additional Analyst Notes: - CVE
d to permit access on non-secure (http) port and using JASPIC or JSR375 authentication. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148597 - http://www.securitytracker.com/id/1041558 - https://www.ibm.com/support/docview.wss?uid=ibm10728689 - http://www.securityfocus.com/bid/105150
CVE ID: CVE-2018-1756 State: PUBLISHED Published: 2018-09-07T16:00:00Z Last Updated: 2024-09-16T23:51:55.205Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, information in the back-end database. IBM X-Force ID: 148599. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148599
tional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148599 - http://www.ibm.com/support/docview.wss?uid=ibm10728883 - https://www.exploit-db.com/exploits/45392/
CVE ID: CVE-2018-1757 State: PUBLISHED Published: 2018-09-07T16:00:00Z Last Updated: 2024-09-17T01:06:26.401Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 could allow an attacker to obtain sensitive information due to missing authentication in IGI for the survey application. IBM X-Force ID: 148601. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10728883 - https://exchange.xforce.ibmcloud.com/vulnerabilities
erences: - http://www.ibm.com/support/docview.wss?uid=ibm10728883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148601
CVE ID: CVE-2018-1758 State: PUBLISHED Published: 2019-06-27T13:45:29.457874Z Last Updated: 2024-09-17T00:11:06.848Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/A:N/I:L/S:C/C:L/AV:N/PR:L/UI:R/RL:O/E:H/RC:C) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148605. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 148605. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148605
CVE ID: CVE-2018-1759 State: PUBLISHED Published: 2019-03-14T22:00:00Z Last Updated: 2024-09-16T22:31:09.642Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148613. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/
Force ID: 148613. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148613 - http://www.ibm.com/support/docview.wss?uid=ibm10875318 - http://www.securityfocus.com/bid/107433
CVE ID: CVE-2018-1760 State: PUBLISHED Published: 2019-06-27T13:45:29.501504Z Last Updated: 2024-09-16T19:00:32.366Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/A:N/I:L/S:C/C:L/AV:N/PR:L/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148614. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 148614. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148614
CVE ID: CVE-2018-1761 State: PUBLISHED Published: 2019-03-14T22:00:00Z Last Updated: 2024-09-16T22:44:54.002Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148615. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107419 - h
ID: 148615. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107419 - http://www.ibm.com/support/docview.wss?uid=ibm10875364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148615
CVE ID: CVE-2018-1762 State: PUBLISHED Published: 2018-11-29T17:00:00Z Last Updated: 2024-09-16T17:33:37.367Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148616. Additional Analyst Notes: - CVE Program C
ng to credentials disclosure within a trusted session. IBM X-Force ID: 148616. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10742281 - http://www.securityfocus.com/bid/106053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148616
CVE ID: CVE-2018-1763 State: PUBLISHED Published: 2019-03-14T22:00:00Z Last Updated: 2024-09-16T18:43:33.372Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148617. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.ws
Force ID: 148617. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148617 - http://www.securityfocus.com/bid/107433
CVE ID: CVE-2018-1764 State: PUBLISHED Published: 2019-03-14T22:00:00Z Last Updated: 2024-09-16T20:59:03.668Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148618. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/
Force ID: 148618. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148618 - http://www.ibm.com/support/docview.wss?uid=ibm10875318 - http://www.securityfocus.com/bid/107433
CVE ID: CVE-2018-1766 State: PUBLISHED Published: 2018-10-29T15:00:00Z Last Updated: 2024-09-16T19:04:13.739Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Team Concert (RTC) 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148620. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce
ession. IBM X-Force ID: 148620. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148620 - http://www.ibm.com/support/docview.wss?uid=ibm10737301
CVE ID: CVE-2018-1767 State: PUBLISHED Published: 2018-10-29T15:00:00Z Last Updated: 2024-09-16T18:49:06.479Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Cachemonitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148621. Additional Analyst Notes: - CVE Program Container: References: - https://exc
a trusted session. IBM X-Force ID: 148621. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148621 - http://www.securitytracker.com/id/1041983 - https://www.ibm.com/support/docview.wss?uid=ibm10729547
CVE ID: CVE-2018-1768 State: PUBLISHED Published: 2018-09-26T15:00:00Z Last Updated: 2024-09-16T17:58:18.147Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file. IBM X-Force ID: 148622. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14
ainer: References: - http://www.securitytracker.com/id/1041715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148622 - http://www.ibm.com/support/docview.wss?uid=ibm10729219
CVE ID: CVE-2018-1770 State: PUBLISHED Published: 2018-10-12T12:00:00Z Last Updated: 2024-09-16T17:34:30.588Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 148686. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-30 - ht
itional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-30 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148686 - http://www.securitytracker.com/id/1041874 - https://www.ibm.com/support/docview.wss?uid=ibm10729521
CVE ID: CVE-2018-1771 State: PUBLISHED Published: 2018-12-20T14:00:00Z Last Updated: 2024-09-17T03:02:20.079Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Domino Problem Types: Gain Privileges Description: IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148687 - https://www.ibm.com/support/docview.wss?uid=ibm10743405
CVE ID: CVE-2018-1772 State: PUBLISHED Published: 2019-01-15T19:00:00 Last Updated: 2024-08-05T04:07:44.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148689. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10791853 - http://www.securityfocus.com/bid/106630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148689
CVE ID: CVE-2018-1773 State: PUBLISHED Published: 2018-09-12T14:00:00Z Last Updated: 2024-09-17T01:30:59.192Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Datacap Problem Types: Bypass Security Description: IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication mechanisms once the initial login is completed. IBM X-Force ID: 148691. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105340 - https://www.ibm.com/support/docview.wss?uid=ibm10729013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148691
CVE ID: CVE-2018-1774 State: PUBLISHED Published: 2018-11-09T00:00:00Z Last Updated: 2024-09-16T19:45:55.293Z Severity: HIGH (CVSS 8.9 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:H/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and analytics that could contain malicious commands that would be executed once opened by an administrator. IBM X-Force ID: 148692. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10737867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148692
CVE ID: CVE-2018-1775 State: PUBLISHED Published: 2019-02-27T22:00:00Z Last Updated: 2024-09-16T18:43:43.401Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:T) Vendors: IBM Products: torwize V7000, torwize V3500, torwize V3700, Spectrum Virtualize for Public Cloud, Spectrum Virtualize Software, SAN Volume Controller, FlashSystem V9000, torwize V5000, FlashSystem 9100 Family Problem Types: Obtain Information Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757. Additio
could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148757 - https://www.ibm.com/support/docview.wss?uid=ibm10872486
CVE ID: CVE-2018-1777 State: PUBLISHED Published: 2018-10-16T19:00:00Z Last Updated: 2024-09-16T20:01:24.119Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148800. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytrack
ssion. IBM X-Force ID: 148800. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041873 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148800 - https://www.ibm.com/support/docview.wss?uid=ibm10730631
CVE ID: CVE-2018-1778 State: PUBLISHED Published: 2018-12-20T14:00:00Z Last Updated: 2024-09-17T03:23:10.808Z Severity: HIGH (CVSS 7.7 CVSS:3.0/A:L/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Bypass Security Description: IBM LoopBack (IBM API Connect 2018.1, 2018.4.1, 5.0.8.0, and 5.0.8.4) could allow an attacker to bypass authentication if the AccessToken Model is exposed over a REST API, it is then possible for anyone to create an AccessToken for any User provided they know the userId and can hence get access to the other user&#195;&#162;&#194;&#128;&#194;&#153;s data / access to their privileges (if the user happens to be an Admin for e
er user&#195;&#162;&#194;&#128;&#194;&#153;s data / access to their privileges (if the user happens to be an Admin for example). IBM X-Force ID: 148801. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148801 - http://www.securityfocus.com/bid/106313
CVE ID: CVE-2018-1779 State: PUBLISHED Published: 2018-11-20T14:00:00Z Last Updated: 2024-09-17T02:27:46.719Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:H/AC:L/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Denial of Service Description: IBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause a denial of service due to not setting limits on JSON payload size. IBM X-Force ID: 148802. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733851 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148802 - http://www.securityfocus.com/bid/105991
CVE ID: CVE-2018-1780 State: PUBLISHED Published: 2018-11-09T00:00:00Z Last Updated: 2024-09-16T19:14:14.812Z Severity: HIGH (CVSS 7.8 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 instance owner to obtain root access by exploiting a symbolic link attack to read/write/corrupt a file that they originally did not have permission to access. IBM X-Force ID: 148803. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105885 -
ID: 148803. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148803 - http://www.ibm.com/support/docview.wss?uid=ibm10733939 - http://www.securitytracker.com/id/1042086
CVE ID: CVE-2018-1781 State: PUBLISHED Published: 2018-11-09T00:00:00Z Last Updated: 2024-09-17T03:28:49.349Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access by exploiting a symbolic link attack to read/write/corrupt a file that they originally did not have permission to access. IBM X-Force ID: 148804. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148
dditional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148804 - http://www.securityfocus.com/bid/105885 - http://www.ibm.com/support/docview.wss?uid=ibm10733939 - http://www.securitytracker.com/id/1042086
CVE ID: CVE-2018-1782 State: PUBLISHED Published: 2018-09-19T15:00:00Z Last Updated: 2024-09-17T02:41:39.089Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:H/AC:L/AV:L/C:N/I:N/PR:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Denial of Service Description: IBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a local, unprivileged user to cause a kernel panic on a node running GPFS by accessing a file that is stored on a GPFS file system with mmap, or by executing a crafted file stored on a GPFS file system. IBM X-Force ID: 148805. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10730967 - https://exch
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10730967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148805