Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4005 State: PUBLISHED Published: 2013-08-21T21:00:00 Last Updated: 2024-08-06T16:30:49.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified fields. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85270 - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 - http://www.securitytracker.com/id/1028932 - http://
/85270 - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 - http://www.securitytracker.com/id/1028932 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM88208
CVE ID: CVE-2013-4006 State: PUBLISHED Published: 2013-11-16T15:00:00 Last Updated: 2024-08-06T16:30:49.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM90472 - http://www-01.ibm.com/support/docview.wss?&uid=swg21651880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85273
CVE ID: CVE-2013-4007 State: PUBLISHED Published: 2013-08-16T01:00:00 Last Updated: 2024-08-06T16:30:49.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85274 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093491
CVE ID: CVE-2013-4011 State: PUBLISHED Published: 2013-07-18T16:00:00 Last Updated: 2024-08-06T16:30:49.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54215 - http://www.ibm.com/support/docview.wss?uid=isg1IV43562 - http://www.securitytracker.com/id/1028792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85617 - http://aix.software.ibm.com/aix/efixes/security/infiniband_advi
s://exchange.xforce.ibmcloud.com/vulnerabilities/85617 - http://aix.software.ibm.com/aix/efixes/security/infiniband_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IV43580 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19167 - http://www.ibm.com/support/docview.wss?uid=isg1IV43827 - http://osvdb.org/95419 - http://www.ibm.com/support/docview.wss?uid=isg1IV43561 - http://osvdb.org/95420 - http://www.ibm.com/support/docview.wss?uid=isg1IV43582 - http://www.ibm.com/support/docview.wss?uid=isg1IV43756 - http://www.securityfocus.com/bid/61287
CVE ID: CVE-2013-4012 State: PUBLISHED Published: 2013-12-22T15:00:00 Last Updated: 2024-08-06T16:30:49.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file installation, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85618 - http://www-01.ibm.com/support/docview.wss?uid=swg21660011 - http://www-01.ibm.com/support/docview.wss?uid
lities/85618 - http://www-01.ibm.com/support/docview.wss?uid=swg21660011 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM93172
CVE ID: CVE-2013-4013 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV39202 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85791
CVE ID: CVE-2013-4014 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV39515 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabili
ies/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85792
CVE ID: CVE-2013-4015 State: PUBLISHED Published: 2013-07-26T10:00:00 Last Updated: 2024-08-06T16:30:49.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected Mode or (2) Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85762 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055
CVE ID: CVE-2013-4016 State: PUBLISHED Published: 2014-05-26T16:00:00 Last Updated: 2024-08-06T16:30:49.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFI
sk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 allows remote authenticated users to execute arbitrary SQL commands via a Birt report with a WHERE clause in plain text. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85793 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV41871
CVE ID: CVE-2013-4017 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85794 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV42682
CVE ID: CVE-2013-4018 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85795 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV42684
CVE ID: CVE-2013-4019 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85796 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV42664 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085
CVE ID: CVE-2013-4020 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV42775 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85825
CVE ID: CVE-2013-4021 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to conduct unspecified file-inclusion attacks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85826 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV42816 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085
CVE ID: CVE-2013-4022 State: PUBLISHED Published: 2013-09-25T10:00:00 Last Updated: 2024-08-06T16:30:49.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21650504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85928
CVE ID: CVE-2013-4024 State: PUBLISHED Published: 2013-09-25T10:00:00 Last Updated: 2024-08-06T16:30:49.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21650504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85931
CVE ID: CVE-2013-4025 State: PUBLISHED Published: 2013-09-25T10:00:00 Last Updated: 2024-08-06T16:30:49.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21650504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85933
CVE ID: CVE-2013-4027 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86064 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV43491 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085
CVE ID: CVE-2013-4030 State: PUBLISHED Published: 2014-01-21T01:00:00 Last Updated: 2024-08-06T16:30:49.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86068 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_a
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_and_flex_systems_cve_2013_40301
CVE ID: CVE-2013-4031 State: PUBLISHED Published: 2013-08-09T23:00:00 Last Updated: 2024-08-06T16:30:49.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnera
d vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86172 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463
CVE ID: CVE-2013-4032 State: PUBLISHED Published: 2013-10-02T10:00:00 Last Updated: 2024-08-06T16:30:49.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fast Communications Manager (FCM) in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition 10.1 before FP3 and 10.5, when a multi-node configuration is used, allows remote attackers to cause a denial of service via vectors involving arbitrary data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86092 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC94434 - http://www-01.ibm.com/support/docview.wss?uid=swg21650231 - http://www-01.
ibm.com/support/docview.wss?uid=swg1IC94434 - http://www-01.ibm.com/support/docview.wss?uid=swg21650231 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC94939
CVE ID: CVE-2013-4033 State: PUBLISHED Published: 2013-08-28T10:00:00 Last Updated: 2024-08-06T16:30:49.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86093 - http://www-01.ibm.com/support/docview.wss?uid=swg21646809 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC94523 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC94756 - http://www-01.ibm.com/support/docview
.wss?uid=swg1IC94523 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC94756 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC94758 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC94757
CVE ID: CVE-2013-4034 State: PUBLISHED Published: 2013-11-16T02:00:00 Last Updated: 2024-08-06T16:30:49.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21652590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86137
CVE ID: CVE-2013-4035 State: PUBLISHED Published: 2018-05-01T18:00:00 Last Updated: 2024-08-06T16:30:49.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.00, 3.6.0, and 3.6.0.1 allow remote attackers to have unspecified impact by leveraging failure to reject client requests for an unencrypted session when used as the server in a TCP/IP session and configured for SSL encryption with the client. IBM X-Force ID: 86138. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86138 - https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sterling-connectdirect-for
ce.ibmcloud.com/vulnerabilities/86138 - https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sterling-connectdirect-for-openvms-unencrypted-data-transfers-can-occur-even-when-ssl-encryption-is-specified-in-the-security-configuration-cve-2013-4035/
CVE ID: CVE-2013-4036 State: PUBLISHED Published: 2013-11-27T02:00:00 Last Updated: 2024-08-06T16:30:49.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21656857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/814
: - http://www-01.ibm.com/support/docview.wss?uid=swg21656857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81482
CVE ID: CVE-2013-4037 State: PUBLISHED Published: 2013-08-09T23:00:00 Last Updated: 2024-08-06T16:30:49.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463 - https://exchan
rogram Container: References: - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86173
CVE ID: CVE-2013-4038 State: PUBLISHED Published: 2013-08-09T23:00:00 Last Updated: 2024-08-06T16:30:49.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86174 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463
CVE ID: CVE-2013-4039 State: PUBLISHED Published: 2013-08-28T10:00:00 Last Updated: 2024-08-06T16:30:49.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated users to obtain sensitive information, and consequently bypass intended access restrictions on jobs, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM84760 - http://www-01.ibm.com/support/docview.wss?uid=swg21647485 - http://www.securityfocus.com/bid/61992 - http://secunia.com/advisories/54651 - https://exchange.xforce.ibmcloud.com/vulnerabili
www.securityfocus.com/bid/61992 - http://secunia.com/advisories/54651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86175 - http://osvdb.org/96607 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554
CVE ID: CVE-2013-4040 State: PUBLISHED Published: 2018-05-01T18:00:00 Last Updated: 2024-08-06T16:30:49.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-Force ID: 86176. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=swg21672253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86176
CVE ID: CVE-2013-4041 State: PUBLISHED Published: 2013-11-24T18:00:00 Last Updated: 2024-08-06T16:30:49.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86416 - http://www-01.ibm.com/support/docview.wss?uid=swg21655202 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV51088 - http://rhn.redhat.com/errata/RHSA-2013-1508.html - http://lists.opensuse.org/opensuse
port/docview.wss?uid=swg1IV51088 - http://rhn.redhat.com/errata/RHSA-2013-1508.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html - http://www-01.ibm.com/support/docview.wss?uid=swg21655201 - https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV51087 - http://rhn.redhat.com/errata/RHSA-2013-1793.html - http://rhn.redhat.com/errata/RHSA-2013-1509.html - http://rhn.redhat.com/errata/RHSA-2013-1507.html - http://secunia.com/advisories/56338