Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-7395 State: PUBLISHED Published: 2015-11-08T02:00:00 Last Updated: 2024-08-06T07:51:27.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 FP002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 FP002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended work-order change restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http
order change restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21969072
CVE ID: CVE-2015-7396 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.1 FP1 for SmartCloud Control Desk allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or modify data, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21970799
CVE ID: CVE-2015-7397 State: PUBLISHED Published: 2016-01-10T02:00:00 Last Updated: 2024-08-06T07:51:27.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referrer parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24041142 - http://www.securitytracker.com/id/1034640 - http://www-01.ibm.com/support/docview.wss?uid=swg21969562 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR5
4640 - http://www-01.ibm.com/support/docview.wss?uid=swg21969562 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54295
CVE ID: CVE-2015-7398 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T07:51:27.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21973592
CVE ID: CVE-2015-7399 State: PUBLISHED Published: 2016-01-11T11:00:00 Last Updated: 2024-08-06T07:51:27.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 before 10.0.0.0 allow remote attackers to obtain sensitive information about the HTTP server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC99031 - http://www.securitytracker.com/id/1034999 - http://www-01.ibm.com/support/docview.wss?uid=swg21969672
CVE ID: CVE-2015-7400 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035319 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT12268 - http://www.securityfocus.com/bid/77986 - http://www-01.ibm.com/support/docview.wss?uid=swg21970392
CVE ID: CVE-2015-7401 State: PUBLISHED Published: 2018-03-26T18:00:00 Last Updated: 2024-08-06T07:51:27.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive document information by guessing the document id. IBM X-Force ID: 107106. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21977425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/107106
CVE ID: CVE-2015-7402 State: PUBLISHED Published: 2016-01-02T02:00:00 Last Updated: 2024-08-06T07:51:27.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21970661
CVE ID: CVE-2015-7403 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service (incorrect pointer dereference and node crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005452 - http://www.securitytracker.com/id/1035094 - http://www.securityfocus.com/bid/79805 - http://www-01.ibm.com/support/docview.wss?uid=swg21972152
CVE ID: CVE-2015-7404 State: PUBLISHED Published: 2015-11-14T02:00:00 Last Updated: 2024-08-06T07:51:27.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka Spectrum Protect for Databases) 5.5 before 5.5.6.2, 6.3 before 6.3.1.6, 6.4 before 6.4.1.8, and 7.1 before 7.1.4; Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server (aka Spectrum Protect for Mail) 5.5 before 5.5.1.1, 6.1 and 6.3 before 6.3.1.6, 6.4 before 6.4.1.8, and 7.1 before 7.1.4; and Tivoli Storage FlashCopy Manager for Windows (aka Spectrum Protect Snapshot) 2.x and 3.1 before 3.1.1.6, 3.2 before 3.2.1.8,
i Storage FlashCopy Manager for Windows (aka Spectrum Protect Snapshot) 2.x and 3.1 before 3.1.1.6, 3.2 before 3.2.1.8, and 4.1 before 4.1.4, when application tracing is configured, write cleartext passwords during changetsmpassword command execution, which allows local users to obtain sensitive information by reading the application trace output. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21969514 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT11349
CVE ID: CVE-2015-7407 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT12268 - http://www.securityfocus.com/bid/78455 - http://www-01.ibm.com/support/docview.wss?uid=swg21970299
CVE ID: CVE-2015-7408 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T07:51:27.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT13609 - http://www-01.ibm.com/support/docview.wss?uid=swg21975957
CVE ID: CVE-2015-7409 State: PUBLISHED Published: 2016-01-01T11:00:00 Last Updated: 2024-08-06T07:51:27.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified field. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21973175
CVE ID: CVE-2015-7410 State: PUBLISHED Published: 2016-01-01T02:00:00 Last Updated: 2024-08-06T07:51:27.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79685 - http://www-01.ibm.com/support/docview.wss?uid=swg21972676
CVE ID: CVE-2015-7411 State: PUBLISHED Published: 2016-03-12T02:00:00 Last Updated: 2024-08-06T07:51:27.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 through FP6 allows remote authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035240 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV77992 - http://www-01.ibm.com/support/docview.wss?uid=swg21973559
CVE ID: CVE-2015-7412 State: PUBLISHED Published: 2015-11-08T22:00:00 Last Updated: 2024-08-06T07:51:27.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GatewayScript modules on IBM DataPower Gateways with software 7.2.0.x before 7.2.0.1, when the GatewayScript decryption API or a JWE decrypt action is enabled, do not require signed ciphertext data, which makes it easier for remote attackers to obtain plaintext data via a padding-oracle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21964170 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT10701
CVE ID: CVE-2015-7413 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T07:51:27.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF19 and 8.5.0 through CF08 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI50844 - http://www-01.ibm.com/support/docview.wss?uid=swg21970176 - http://www.securitytracker.com/id/1034284
CVE ID: CVE-2015-7414 State: PUBLISHED Published: 2016-01-17T02:00:00 Last Updated: 2024-08-06T07:51:27.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21971545
CVE ID: CVE-2015-7415 State: PUBLISHED Published: 2016-01-01T02:00:00 Last Updated: 2024-08-06T07:51:27.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before 6.2.0.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21970811
CVE ID: CVE-2015-7416 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: AFP Workbench Viewer in IBM i Access 7.1 on Windows allows remote attackers to cause a denial of service (viewer crash) via a crafted workbench file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1SI57907 - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020995
CVE ID: CVE-2015-7417 State: PUBLISHED Published: 2016-01-23T02:00:00 Last Updated: 2024-08-06T07:51:27.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 7.0 before 7.0.0.41, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.9 allows remote authenticated users to inject arbitrary web script or HTML via crafted data from an OAuth provider. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034783 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI49272 - http://www.securityfocus.com/bid/81738 - http://www-01.ibm.com/support/docview.wss?uid=swg21974520
CVE ID: CVE-2015-7418 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-06T07:51:27.399Z Vendors: IBM Corporation Products: WebSphere DataPower XC10 Appliance Problem Types: Obtain Information Description: IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator privileges to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21971657 - http://www.securityfocus.com/bid/83634
CVE ID: CVE-2015-7419 State: PUBLISHED Published: 2015-11-14T02:00:00 Last Updated: 2024-08-06T07:51:27.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service (memory consumption) via crafted requests. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21969906 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI50952 - http://www.securitytracker.com/id/1034146
CVE ID: CVE-2015-7420 State: PUBLISHED Published: 2016-01-01T02:00:00 Last Updated: 2024-08-06T07:51:27.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7421. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034846 - http://www.securityfocus.com/bid/82301 - http://www-01.ibm.com/support/docview.wss?uid=swg21971500 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1023277
CVE ID: CVE-2015-7421 State: PUBLISHED Published: 2016-01-01T02:00:00 Last Updated: 2024-08-06T07:51:27.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7420. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034846 - http://www-01.ibm.com/support/docview.wss?uid=swg21971500 - http://www.securityfocus.com/bid/82303 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1023277
CVE ID: CVE-2015-7422 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM i Access 7.1 on Windows allows local users to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020996 - http://www-01.ibm.com/support/docview.wss?uid=swg1SI57907
CVE ID: CVE-2015-7423 State: PUBLISHED Published: 2018-03-26T18:00:00 Last Updated: 2024-08-06T07:51:27.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 107771. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103687 - http://www-01.ibm.com/support/docview.wss?uid=swg21971543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/107771
CVE ID: CVE-2015-7424 State: PUBLISHED Published: 2018-03-26T18:00:00 Last Updated: 2024-08-06T07:51:27.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information by leveraging Catalogs access. IBM X-Force ID: 107780. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21971542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/107780
CVE ID: CVE-2015-7425 State: PUBLISHED Published: 2016-02-21T18:00:00 Last Updated: 2024-08-06T07:51:27.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Protection component in the VMware vSphere GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.4 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 3.1 before 3.1.1.3, 3.2 before 3.2.0.6, and 4.1 before 4.1.4 allows remote attackers to obtain administrative privileges via a crafted URL that triggers back-end function execution. Additional Analyst Not
to obtain administrative privileges via a crafted URL that triggers back-end function execution. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21973086 - http://www.securityfocus.com/bid/79545
CVE ID: CVE-2015-7426 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 4.1 before 4.1.3.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21971484
CVE ID: CVE-2015-7427 State: PUBLISHED Published: 2015-11-14T02:00:00 Last Updated: 2024-08-06T07:51:27.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DataPower Gateway appliances with firmware 6.x before 6.0.0.17, 6.0.1.x before 6.0.1.17, 7.x before 7.0.0.10, 7.1.0.x before 7.1.0.7, and 7.2.x before 7.2.0.1 do not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT10279 - http://www-01.ibm.com/support/docview.wss?uid
References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT10279 - http://www-01.ibm.com/support/docview.wss?uid=swg21969342
CVE ID: CVE-2015-7428 State: PUBLISHED Published: 2016-02-29T11:00:00 Last Updated: 2024-08-06T07:51:27.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21975358 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI51589
CVE ID: CVE-2015-7429 State: PUBLISHED Published: 2016-01-02T02:00:00 Last Updated: 2024-08-06T07:51:27.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.4 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 4.1 before 4.1.4 allows remote authenticated users to restore arbitrary virtual machines and consequently obtain sensitive information by visiting the vSphere inventory. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com
y visiting the vSphere inventory. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21973087 - http://www.securityfocus.com/bid/79541
CVE ID: CVE-2015-7430 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System (GPFS) allows local users to read or write to arbitrary GPFS data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=isg3T1022979
CVE ID: CVE-2015-7431 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21970676 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04830
CVE ID: CVE-2015-7432 State: PUBLISHED Published: 2018-03-26T18:00:00 Last Updated: 2024-08-06T07:51:27.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Capacity Management Analytics 2.1.0.0 allows local users to decrypt usernames and passwords by leveraging access to setenv.sh and parameter.txt. IBM X-Force ID: 107861. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21974558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/107861
CVE ID: CVE-2015-7433 State: PUBLISHED Published: 2018-03-26T18:00:00 Last Updated: 2024-08-06T07:51:27.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveraging access to the CMA install machine. IBM X-Force ID: 107862. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21974556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/107862
CVE ID: CVE-2015-7434 State: PUBLISHED Published: 2018-03-26T18:00:00 Last Updated: 2024-08-06T07:51:27.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Capacity Management Analytics 2.1.0.0 allows local users to discover encrypted usernames and passwords by leveraging access to the CMA install machine. IBM X-Force ID: 107863. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21974559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/107863