Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5403 State: PUBLISHED Published: 2013-09-27T20:00:00 Last Updated: 2024-08-06T17:06:52.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21651098 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87299
CVE ID: CVE-2013-5404 State: PUBLISHED Published: 2013-12-10T19:00:00 Last Updated: 2024-08-06T17:06:52.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87318 - http://www-01.ibm.com/suppor
ogram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87318 - http://www-01.ibm.com/support/docview.wss?uid=swg21653689
CVE ID: CVE-2013-5405 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T17:06:52.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87354 - http://www-01.ibm.com/support/docview.wss?uid=swg21657539 - http://www.securityfocus.com/bid/64443 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96053
CVE ID: CVE-2013-5406 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T17:06:52.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, leading to improper interaction with the Windows MHTML protocol handler. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21657539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87355 - http://www.securityfocus.com/bid/64446 - http://www-01.i
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87355 - http://www.securityfocus.com/bid/64446 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96055
CVE ID: CVE-2013-5407 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T17:06:52.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21657539 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87356
CVE ID: CVE-2013-5409 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T17:06:52.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87358 - http://www-01.ibm.com/support/docview.wss?uid=swg21657539 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96049
CVE ID: CVE-2013-5411 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T17:06:52.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87360 - http://www-01.ibm.com/support/docview.wss?uid=swg21657539 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96059
CVE ID: CVE-2013-5413 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T17:06:52.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21657539 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87362
CVE ID: CVE-2013-5414 State: PUBLISHED Published: 2013-11-16T15:00:00 Last Updated: 2024-08-06T17:06:52.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The migration functionality in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 does not properly support the distinction between the admin role and the adminsecmanager role, which allows remote authenticated users to gain privileges in opportunistic circumstances by accessing resources in between a migration and a role evaluation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87476 - http://www-01.ibm.
: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87476 - http://www-01.ibm.com/support/docview.wss?&uid=swg21651880 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM92313
CVE ID: CVE-2013-5415 State: PUBLISHED Published: 2013-12-18T11:00:00 Last Updated: 2024-08-06T17:06:52.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21657982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87477
CVE ID: CVE-2013-5416 State: PUBLISHED Published: 2013-12-18T11:00:00 Last Updated: 2024-08-06T17:06:52.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21657982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87478
CVE ID: CVE-2013-5417 State: PUBLISHED Published: 2013-11-16T15:00:00 Last Updated: 2024-08-06T17:06:52.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via HTTP response data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87479 - http://www-01.ibm.com/support/docview.wss?&uid=swg21651880 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM93323 - http://www
01.ibm.com/support/docview.wss?&uid=swg21651880 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM93323 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM93944
CVE ID: CVE-2013-5418 State: PUBLISHED Published: 2013-11-16T15:00:00 Last Updated: 2024-08-06T17:06:52.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM96477 - http://www.securityfocus.com/bid/63778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87480 - http://www-01.ibm.com/support/docvie
yfocus.com/bid/63778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87480 - http://www-01.ibm.com/support/docview.wss?&uid=swg21651880
CVE ID: CVE-2013-5419 State: PUBLISHED Published: 2013-10-04T10:00:00 Last Updated: 2024-08-06T17:06:52.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain privileges by leveraging printq group membership. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IV47429 - http://www.ibm.com/support/docview.wss?uid=isg1IV47427 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87481 - http://www.ibm.com/sup
val%3Aorg.mitre.oval%3Adef%3A18775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87481 - http://www.ibm.com/support/docview.wss?uid=isg1IV47428 - http://aix.software.ibm.com/aix/efixes/security/cmdque_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IV47430
CVE ID: CVE-2013-5420 State: PUBLISHED Published: 2013-12-23T22:00:00 Last Updated: 2024-08-06T17:06:52.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87482 - http://www-01.ibm.com/support/docview.wss?uid=swg21660211
CVE ID: CVE-2013-5421 State: PUBLISHED Published: 2013-12-22T15:00:00 Last Updated: 2024-08-06T17:06:52.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87483 - http://www-01.ibm.com/support/docview.wss?uid=swg21660210
CVE ID: CVE-2013-5422 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T17:06:52.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2, when a multi-database dataset exists, allows remote attackers to read database names via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM97698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87484 - http://www-01.ibm.com/support/docview.wss?uid=swg21660036
CVE ID: CVE-2013-5423 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T17:06:52.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Flex System Manager (FSM) 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68370 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT00278 - http://secunia.com/advisories/58948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87485 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095891
CVE ID: CVE-2013-5424 State: PUBLISHED Published: 2013-10-25T20:00:00 Last Updated: 2024-08-06T17:06:52.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87486 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093938 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96952
CVE ID: CVE-2013-5425 State: PUBLISHED Published: 2013-11-16T02:00:00 Last Updated: 2024-08-06T17:06:52.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM93828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87487 - http://www-01.ibm.com/support/docview.wss?uid=swg21652405
CVE ID: CVE-2013-5426 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T17:06:52.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 IF5 and 11.0 before IF1 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 IF11 allows remote authenticated users to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21660082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87535
CVE ID: CVE-2013-5427 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T17:06:52.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21663181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87536
CVE ID: CVE-2013-5428 State: PUBLISHED Published: 2013-10-22T10:00:00 Last Updated: 2024-08-06T17:06:52.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21653546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87560 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC93164 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96617
CVE ID: CVE-2013-5429 State: PUBLISHED Published: 2014-01-21T01:00:00 Last Updated: 2024-08-06T17:06:52.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Risk Based Access functionality in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.2 before FP9 does not prevent reuse of One Time Password (OTP) tokens, which makes it easier for remote authenticated users to complete transactions by leveraging access to an already-used token. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21660510 - http://www-01.ibm.com/support/docview.wss?
er: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21660510 - http://www-01.ibm.com/support/docview.wss?uid=swg21660509 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV52624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87561
CVE ID: CVE-2013-5430 State: PUBLISHED Published: 2013-10-28T01:00:00 Last Updated: 2024-08-06T17:06:52.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87562 - http://www-01.ibm.com/support/docview.wss?uid=swg21653287
CVE ID: CVE-2013-5431 State: PUBLISHED Published: 2013-11-01T01:00:00 Last Updated: 2024-08-06T17:15:20.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21654114 - http://www
yst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21654114 - http://www.kb.cert.org/vuls/id/596990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87616 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV50639
CVE ID: CVE-2013-5433 State: PUBLISHED Published: 2014-08-12T00:00:00 Last Updated: 2024-08-06T17:15:20.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87639 - http://www-01.ibm.com/support/docview.wss?uid=swg21680575
CVE ID: CVE-2013-5438 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:15:20.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web server in IBM Flex System Manager (FSM) 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87753 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_flex_system_manager_web_server_allows_generic_xss_cve_2013_5438 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5094212
CVE ID: CVE-2013-5440 State: PUBLISHED Published: 2013-12-18T11:00:00 Last Updated: 2024-08-06T17:15:20.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21659957 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR48095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87816
CVE ID: CVE-2013-5442 State: PUBLISHED Published: 2013-11-13T15:00:00 Last Updated: 2024-08-06T17:15:20.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Local Management Interface (LMI) in IBM Security Network Protection on XGS 5100 devices with firmware 5.1 before 5.1.0.6 and 5.1.1 before 5.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87818 - http://www-01.ibm.com/support/docview.wss?uid=swg21655377 - http://www.securityfocus.com/bid/63642
CVE ID: CVE-2013-5443 State: PUBLISHED Published: 2014-03-25T20:00:00 Last Updated: 2024-08-06T17:15:20.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87819 - http://www-01.ibm.com/support/docview.wss?uid=swg21667626
CVE ID: CVE-2013-5444 State: PUBLISHED Published: 2014-03-25T20:00:00 Last Updated: 2024-08-06T17:15:20.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21667626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87820
CVE ID: CVE-2013-5445 State: PUBLISHED Published: 2014-03-25T20:00:00 Last Updated: 2024-08-06T17:15:20.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87821 - http://www-01.ibm.com/support/docview.wss?uid=swg21667626
CVE ID: CVE-2013-5446 State: PUBLISHED Published: 2013-10-22T10:00:00 Last Updated: 2024-08-06T17:15:20.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21653546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87910 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC93164 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96617
CVE ID: CVE-2013-5447 State: PUBLISHED Published: 2013-12-10T02:00:00 Last Updated: 2024-08-06T17:15:20.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO78184 - http://www.exploit-db.com/exploits/30789 - http://www.zerodayinitiative.com/advisories/ZDI-13-274/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/87911 - http://www-01.ibm.com/support/docview.wss?uid=swg21657500 -
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/87911 - http://www-01.ibm.com/support/docview.wss?uid=swg21657500 - http://packetstormsecurity.com/files/124658