Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6149 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T12:10:12.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in BIRT-viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21688296 - http://www.securityfocus.com/bid/70805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96919
CVE ID: CVE-2014-6150 State: PUBLISHED Published: 2014-10-31T10:00:00 Last Updated: 2024-08-06T12:10:12.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.0 through 7.2.1.6 and 7.2.2.0 through 7.2.2.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61785 - http://www-01.ibm.com/support/docview.wss?uid=swg21688424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96920
CVE ID: CVE-2014-6151 State: PUBLISHED Published: 2014-10-25T10:00:00 Last Updated: 2024-08-06T12:10:12.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21687541 - http://www.securityfocus.com/bid/70727 - http://secunia.com/advisories/61899 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI27417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97033
CVE ID: CVE-2014-6152 State: PUBLISHED Published: 2014-10-25T10:00:00 Last Updated: 2024-08-06T12:10:12.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Integrated Portal (TIP) 2.2.x allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21687541 - http://secunia.com/advisories/61899 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI27417 - http://www.securityfocus.com/bid/70729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97034
CVE ID: CVE-2014-6153 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:12.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21693389 - http://www.ibm.com/support/docview.wss?ui
tainer: References: - http://www.ibm.com/support/docview.wss?uid=swg21693389 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www.ibm.com/support/docview.wss?uid=swg21693379 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97622 - http://www.ibm.com/support/docview.wss?uid=swg21693381 - http://www.ibm.com/support/docview.wss?uid=swg21693387
CVE ID: CVE-2014-6154 State: PUBLISHED Published: 2015-02-13T02:00:00 Last Updated: 2024-08-06T12:10:12.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for DB2 5.1 through 5.3.1 on Linux, UNIX, and Windows allows remote attackers to access arbitrary files via a .. (dot dot) in a URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/97677 - http://www-01.ibm.com/support/docview.wss?uid=swg21696000
CVE ID: CVE-2014-6155 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:13.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allow remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/97678 - http://www.ibm.com/support/docview.wss?uid=swg21693389 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www-01
www.ibm.com/support/docview.wss?uid=swg21693389 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV63585 - http://secunia.com/advisories/61805 - http://www.ibm.com/support/docview.wss?uid=swg21693387
CVE ID: CVE-2014-6158 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T12:10:13.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication System 1.0 before 1.0.0.4 iFix 10, 1.1 before 1.1.0.5, and 2.0 before 2.0.0.1 and Workload Deployer 3.1.0.7 before IF5 allow remote authenticated users to execute arbitrary code via a (1) Script Package, (2) Add-On, or (3) Emergency Fixes component. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62032 - http://www-01.ibm.com/support/docview.wss?uid=swg21693292 - http://secunia.com/advis
tp://secunia.com/advisories/62032 - http://www-01.ibm.com/support/docview.wss?uid=swg21693292 - http://secunia.com/advisories/61956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97707 - http://www-01.ibm.com/support/docview.wss?uid=swg21693440
CVE ID: CVE-2014-6159 State: PUBLISHED Published: 2014-11-08T11:00:00 Last Updated: 2024-08-06T12:10:12.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when immediate AUTO_REVAL is enabled, allows remote authenticated users to cause a denial of service (daemon crash) via a crafted ALTER TABLE statement. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62092 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05074 - http://www.securityfocus.com/bid/71006 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04730 - http:
swg1IT05074 - http://www.securityfocus.com/bid/71006 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04730 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97708 - http://secunia.com/advisories/62093 - http://www-01.ibm.com/support/docview.wss?uid=swg21693197 - http://www-01.ibm.com/support/docview.wss?uid=swg21688051 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05105
CVE ID: CVE-2014-6160 State: PUBLISHED Published: 2014-12-29T02:00:00 Last Updated: 2024-08-06T12:10:12.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/97709 - http://www-01.ibm.com/support/docview.wss?uid=swg21693389 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV63498
CVE ID: CVE-2014-6161 State: PUBLISHED Published: 2014-11-08T11:00:00 Last Updated: 2024-08-06T12:10:12.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-IF0001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21689130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97710 - http://secunia.com/advisories/62168
CVE ID: CVE-2014-6163 State: PUBLISHED Published: 2014-12-11T16:00:00 Last Updated: 2024-08-06T12:10:12.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21691035 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97712
CVE ID: CVE-2014-6164 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:10:12.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect cookies, and consequently obtain sensitive information, via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/97713 - http://www-01.ibm.com/support/docview.wss?uid=swg21690185 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI23430
CVE ID: CVE-2014-6166 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:10:12.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Communications Enabled Applications (CEA) service in IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4, and Feature Pack for CEA 1.x before 1.0.0.15, allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI28632 - https://exchange.xforce.ibmcloud.com/vulnerabili
ferences: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI28632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97746 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI25310 - http://www-01.ibm.com/support/docview.wss?uid=swg21690185
CVE ID: CVE-2014-6167 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:10:12.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the URL rewriting feature in IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21690185 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI23819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97748
CVE ID: CVE-2014-6168 State: PUBLISHED Published: 2014-12-29T02:00:00 Last Updated: 2024-08-06T12:10:12.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21692907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97752
CVE ID: CVE-2014-6169 State: PUBLISHED Published: 2018-04-12T21:00:00 Last Updated: 2024-08-06T12:10:13.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 97777. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/97777 - http://www.securityfocus.com/bid/103761
CVE ID: CVE-2014-6170 State: PUBLISHED Published: 2015-02-02T01:00:00 Last Updated: 2024-08-06T12:10:12.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers to obtain sensitive information by triggering a SOAP fault. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98309 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT01929 - http://www-01.ibm.com/support/docview.wss?uid=swg21690725
CVE ID: CVE-2014-6171 State: PUBLISHED Published: 2014-12-19T02:00:00 Last Updated: 2024-08-06T12:10:13.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF04 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI29134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98383 - http://www-01.ibm.com/support/docview.wss?uid=swg21692107
CVE ID: CVE-2014-6172 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T12:10:12.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98417 - http://www-01.ibm.com/support/docview.wss?uid=swg21694460 - http://www-01.ibm.com/support/docview.wss?uid=swg1LI78291
CVE ID: CVE-2014-6173 State: PUBLISHED Published: 2014-12-19T02:00:00 Last Updated: 2024-08-06T12:10:12.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Process Inspector in IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3 and 8.5.x through 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21690553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98418 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50241
CVE ID: CVE-2014-6174 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:10:12.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.4 allows remote attackers to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21690185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98486 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI27152
CVE ID: CVE-2014-6175 State: PUBLISHED Published: 2015-06-07T18:00:00 Last Updated: 2024-08-06T12:10:12.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21902933 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO0
2933 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923
CVE ID: CVE-2014-6176 State: PUBLISHED Published: 2014-12-16T23:00:00 Last Updated: 2024-08-06T12:10:12.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 disregard the SSL setting in the SCA module HTTP import binding and unconditionally select the SSLv3 protocol, which makes it easier for remote attackers to hijack sessions or obtain sensitive information by leveraging the use of a weak cipher. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?
weak cipher. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21690780 - http://www.securitytracker.com/id/1031383 - http://www.securitytracker.com/id/1031382 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR51593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98488
CVE ID: CVE-2014-6177 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:12.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform access-control checks for depth-0 retrieve operations, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV24386 - http://www.ibm.com/support/docview.wss?uid=swg21693381 - https://exchange.xforce.i
support/docview.wss?uid=swg1IV24386 - http://www.ibm.com/support/docview.wss?uid=swg21693381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98492
CVE ID: CVE-2014-6178 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:12.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV51765 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98514 - http://www.ibm.com/support/docvie
iew.wss?uid=swg21693384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98514 - http://www.ibm.com/support/docview.wss?uid=swg21693387
CVE ID: CVE-2014-6179 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:12.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV51859 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98516 - http://www.ibm.com/support/docview.wss?uid=s
=swg21693384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98516 - http://www.ibm.com/support/docview.wss?uid=swg21693387
CVE ID: CVE-2014-6180 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:12.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the HTTP User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV01657 - http://www.ibm.com/support/docview.wss?uid=swg21693381 - https://exchange.xforce.ibmclou
t/docview.wss?uid=swg1IV01657 - http://www.ibm.com/support/docview.wss?uid=swg21693381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98515
CVE ID: CVE-2014-6181 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:12.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98517 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV25285 - http://www.ibm.com/support/docview.wss?uid=swg21693381
CVE ID: CVE-2014-6182 State: PUBLISHED Published: 2014-12-17T00:00:00 Last Updated: 2024-08-06T12:10:12.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in an export function in the Process Center in IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3 and 8.5.x through 8.5.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031379 - http://www.ibm.com/support/docview.wss?uid=swg21692540 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR51234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9851
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR51234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98518
CVE ID: CVE-2014-6183 State: PUBLISHED Published: 2014-11-23T00:00:00 Last Updated: 2024-08-06T12:10:12.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 before 5.1.2.0 FP9, 5.1.2.1 before FP5, 5.2 before 5.2.0.0 FP5, and 5.3 before 5.3.0.0 FP1 on XGS devices allows remote authenticated users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21690823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98519
CVE ID: CVE-2014-6184 State: PUBLISHED Published: 2015-02-22T02:00:00 Last Updated: 2024-08-06T12:10:12.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4 through 5.4.3.6, 5.5 through 5.5.4.3, 6.1 through 6.1.5.6, 6.2 before 6.2.5.4, and 6.3 before 6.3.2.3 on UNIX, Linux, and OS X allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05707 - http://www-01.ibm.com/support/docview.wss?uid=swg21695878