Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0478 State: PUBLISHED Published: 2013-02-21T01:00:00 Last Updated: 2024-08-06T14:25:10.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21624952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81482
CVE ID: CVE-2013-0479 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:25:10.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81547 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2013-0481 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:25:10.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering (1) an error or (2) an exception. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640830 - http://www-01.ibm.com/support/docview.wss?uid=swg21627986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81546
CVE ID: CVE-2013-0482 State: PUBLISHED Published: 2013-05-29T10:00:00 Last Updated: 2024-08-06T14:25:10.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 through 8.5.0.2 and WebSphere Message Broker 6.1, 7.0 through 7.0.0.5, and 8.0 through 8.0.0.2, when WS-Security is used, allows remote attackers to spoof the signatures of messages via a crafted SOAP message, related to a "Signature Wrap attack," a different vulnerability than CVE-2011-1377 and CVE-2013-0489. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM76582 - http://
nalyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM76582 - http://www-01.ibm.com/support/docview.wss?uid=swg21635474 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC88185 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM86026 - http://www-01.ibm.com/support/docview.wss?uid=swg21634646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81548
CVE ID: CVE-2013-0483 State: PUBLISHED Published: 2013-04-05T16:00:00 Last Updated: 2024-08-06T14:25:10.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81533 - http://www-01.ibm.com/support/docview.wss?uid=swg21631537
CVE ID: CVE-2013-0484 State: PUBLISHED Published: 2013-06-19T10:00:00 Last Updated: 2024-08-06T14:25:10.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server process in IBM Cognos TM1 10.1.x before 10.1.1 FP1 allows remote attackers to cause a denial of service (daemon crash) via an undocumented API call that triggers the transmission of unexpected data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81612 - http://www-01.ibm.com/support/docview.wss?uid=swg21637655
CVE ID: CVE-2013-0485 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T14:25:10.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/developerworks/java/jdk/aix/j532/fixes.html#SR16FP1 - http://www.ibm.com/developerworks/java/jdk/aix/j732/Java7.fixes.html#SR4FP1 - http://www.ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR13FP1 - http://www.ibm.com/developerworks/java/jd
p://www.ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR13FP1 - http://www.ibm.com/developerworks/java/jdk/aix/142_64/fixes.html#SR13FP16 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html - https://bugzilla.redhat.com/show_bug.cgi?id=950072
CVE ID: CVE-2013-0486 State: PUBLISHED Published: 2013-03-27T10:00:00 Last Updated: 2024-08-06T14:25:10.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81812 - http://www-01.ibm.com/support/docview.wss?uid=swg21627597 - http://jvn.jp/en/jp/JVN51305555/index.html - http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000030.html
CVE ID: CVE-2013-0487 State: PUBLISHED Published: 2013-03-27T10:00:00 Last Updated: 2024-08-06T14:25:10.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81852 - http://www-01.ibm.com/support/docview.wss?uid=swg21627597
CVE ID: CVE-2013-0488 State: PUBLISHED Published: 2013-03-27T10:00:00 Last Updated: 2024-08-06T14:25:10.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81853 - http://www-01.ibm.com/support/docview.wss?uid=swg21627597
CVE ID: CVE-2013-0489 State: PUBLISHED Published: 2013-03-27T10:00:00 Last Updated: 2024-08-06T14:25:10.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81854 - http://www-01.ibm.com/support/docview.wss?uid=swg21627597
CVE ID: CVE-2013-0490 State: PUBLISHED Published: 2013-02-27T21:00:00 Last Updated: 2024-08-06T14:25:10.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM InfoSphere Guardium S-TAP 8.1 for DB2 on z/OS allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21626276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81948
CVE ID: CVE-2013-0492 State: PUBLISHED Published: 2013-08-09T23:00:00 Last Updated: 2024-08-06T14:25:10.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Informix Open Admin Tool (OAT) 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21645601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82007
CVE ID: CVE-2013-0494 State: PUBLISHED Published: 2013-08-09T23:00:00 Last Updated: 2024-08-06T14:25:10.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC82726 - http://www-01.ibm.com/support/docview.wss?uid=swg21627989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82009
CVE ID: CVE-2013-0499 State: PUBLISHED Published: 2013-05-28T16:00:00 Last Updated: 2024-08-06T14:25:10.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gateway (MPGW), Web Service Proxy, and Web Token services. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130523-0_IBM_Xi50_Echo-WebService_Xss_in_
es: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130523-0_IBM_Xi50_Echo-WebService_Xss_in_Xml_v10.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/82221 - http://seclists.org/bugtraq/2013/May/83 - http://www-01.ibm.com/support/docview.wss?uid=swg21637717
CVE ID: CVE-2013-0500 State: PUBLISHED Published: 2013-10-17T00:00:00 Last Updated: 2024-08-06T14:25:10.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or cause a denial of service (device crash) via a (1) CIFS, (2) HTTPS, (3) SCP, or (4) SFTP operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ssg1S1004430 - https://exchange.xforce.ibmcloud.c
am Container: References: - http://www.ibm.com/support/docview.wss?uid=ssg1S1004430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84839
CVE ID: CVE-2013-0501 State: PUBLISHED Published: 2013-04-12T19:00:00 Last Updated: 2024-08-06T14:25:10.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management (CDM) 10.2.0, and other products, allows remote attackers to read arbitrary files, or download an arbitrary program onto a client machine and execute this program, via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82345 - http://www.ibm.com/support/docview.wss?uid=swg21627070
CVE ID: CVE-2013-0502 State: PUBLISHED Published: 2013-04-01T19:00:00 Last Updated: 2024-08-06T14:25:10.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server 8.1, 8.5 through FP3, 8.7 through FP2, and 9.1 allows remote attackers to inject arbitrary web script or HTML via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR45274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82233 - http://www-01.ibm.com/support/docview.wss?uid=swg21632556
CVE ID: CVE-2013-0503 State: PUBLISHED Published: 2013-04-23T10:00:00 Last Updated: 2024-08-06T14:25:10.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82265 - http://www-01.ibm.com/support/docview.wss?uid=swg21634538 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO74182
CVE ID: CVE-2013-0504 State: PUBLISHED Published: 2013-02-27T00:00:00 Last Updated: 2024-08-06T14:25:10.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58184 - http://rhn.redhat.com/errata/RHSA-2013-0574.html - http://www.adobe.com/support/security/bulletins/apsb13-08.html - http://lists.opensuse.org/opensuse-security-ann
.html - http://www.adobe.com/support/security/bulletins/apsb13-08.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00026.html
CVE ID: CVE-2013-0505 State: PUBLISHED Published: 2013-03-19T18:00:00 Last Updated: 2024-08-06T14:25:10.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82339 - http://www-01.ibm.com/support/docview.wss?uid=swg1ID358571 - http://www-01.ibm.com/support/docview.wss?uid=swg21631302
CVE ID: CVE-2013-0506 State: PUBLISHED Published: 2013-03-19T18:00:00 Last Updated: 2024-08-06T14:25:10.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82341 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC90858 - http://www-01.ibm.com/support/docview.wss?uid=swg21631302
CVE ID: CVE-2013-0507 State: PUBLISHED Published: 2020-02-05T15:26:26 Last Updated: 2024-08-06T14:25:10.368Z Vendors: IBM Products: IBM InfoSphere Information Server Problem Types: Session Fixation Vulnerability Description: IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59815
CVE ID: CVE-2013-0508 State: PUBLISHED Published: 2013-06-05T01:00:00 Last Updated: 2024-08-06T14:25:10.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 and 4.0.1 before FP1 allow context-dependent attackers to execute arbitrary code or cause a denial of service via a long line in (1) hrfstable.idx, (2) hrdevice.idx, (3) hrstorage.idx, or (4) lotusmapfile in the SSM Config directory, or (5) .manifest.hive in the main agent directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabil
ectory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82333 - http://www-01.ibm.com/support/docview.wss?uid=swg21638459
CVE ID: CVE-2013-0509 State: PUBLISHED Published: 2013-06-05T01:00:00 Last Updated: 2024-08-06T14:25:10.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 allows remote attackers to execute arbitrary code via a SQL transaction with a long table name that is not properly handled by a packet decoder. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82334 - http://www-01.ibm.com/support/docview.wss?uid=swg21638183
CVE ID: CVE-2013-0510 State: PUBLISHED Published: 2013-03-29T10:00:00 Last Updated: 2024-08-06T14:25:10.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specific external server, which allows man-in-the-middle attackers to hijack the test account by capturing these cookies. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82592 - http://www-01.ibm.com/support/docview.wss?uid=swg21626264
CVE ID: CVE-2013-0511 State: PUBLISHED Published: 2013-03-29T10:00:00 Last Updated: 2024-08-06T14:25:10.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82344 - http://www-01.ibm.com/support/docview.wss?uid=swg21626264
CVE ID: CVE-2013-0512 State: PUBLISHED Published: 2013-03-29T10:00:00 Last Updated: 2024-08-06T14:25:10.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to cause a denial of service (plug-in crash) via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21631304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82593 - http://www-01.ibm.com/support/docview.wss?uid=swg21626264
CVE ID: CVE-2013-0513 State: PUBLISHED Published: 2013-03-29T10:00:00 Last Updated: 2024-08-06T14:25:10.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program, related to an "Unquoted Service Path Enumeration" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21631304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82594 - http://www-01.ibm.c
m/support/docview.wss?uid=swg21631304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82594 - http://www-01.ibm.com/support/docview.wss?uid=swg21626264
CVE ID: CVE-2013-0516 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2013-0517 State: PUBLISHED Published: 2020-02-11T17:05:59 Last Updated: 2024-08-06T14:25:10.436Z Vendors: IBM Products: Sterling External Authentication Server Problem Types: authentication error Description: A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59807 - https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-addressed-in-ibm-sterling-external-authentication-server-cve-2013-0514-cve-
y-bulletin-multiple-security-vulnerabilities-addressed-in-ibm-sterling-external-authentication-server-cve-2013-0514-cve-2013-0517-4/
CVE ID: CVE-2013-0518 State: PUBLISHED Published: 2013-05-10T10:00:00 Last Updated: 2024-08-06T14:25:10.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 does not refuse to be rendered in different-origin frames, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83128 - http://www-01.ibm.com/support/docview.wss?uid=swg21636369
CVE ID: CVE-2013-0519 State: PUBLISHED Published: 2013-05-10T10:00:00 Last Updated: 2024-08-06T14:25:10.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 provides web-server version data in (1) an unspecified page title and (2) an unspecified HTTP header field, which allows remote attackers to obtain potentially sensitive information by reading a version string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82654 - http://www-01.ibm.com/support/docview.wss?uid=swg21636369
CVE ID: CVE-2013-0520 State: PUBLISHED Published: 2013-05-10T10:00:00 Last Updated: 2024-08-06T14:33:05.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21636369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83433
CVE ID: CVE-2013-0522 State: PUBLISHED Published: 2018-07-16T14:00:00 Last Updated: 2024-08-06T14:33:03.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password transmission between Windows and Notes. IBM X-Force ID: 82531. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=swg21634508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82531
CVE ID: CVE-2013-0523 State: PUBLISHED Published: 2013-06-21T19:00:00 Last Updated: 2024-08-06T14:33:05.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce Enterprise 5.6.x through 5.6.1.5, 6.0.x through 6.0.0.11, and 7.0.x through 7.0.0.7 does not use a suitable encryption algorithm for storefront web requests, which allows remote attackers to obtain sensitive information via a padding oracle attack that targets certain UTF-8 processing of the krypto parameter, and leverages unspecified browser access or traffic-log access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82541 - http://w
lyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82541 - http://www.vsecurity.com/resources/advisory/20130619-1/ - http://www.vsecurity.com/advisory/20130619-1.txt - http://www-01.ibm.com/support/docview.wss?uid=swg1JR46386 - https://www-01.ibm.com/support/docview.wss?uid=swg21640597