Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0127 State: PUBLISHED Published: 2015-06-28T22:00:00 Last Updated: 2024-08-06T03:55:28.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict use of FRAME elements, which allows remote authenticated users to conduct phishing attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21902807
CVE ID: CVE-2015-0128 State: PUBLISHED Published: 2015-03-18T10:00:00 Last Updated: 2024-08-06T03:55:28.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0124. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031885 - http://www-01.ibm.com/support/docview.wss?uid=swg21697126
CVE ID: CVE-2015-0129 State: PUBLISHED Published: 2015-03-13T01:00:00 Last Updated: 2024-08-06T03:55:28.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21696856 - http://www.securitytracker.com/id/1031886
CVE ID: CVE-2015-0130 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T03:55:28.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager (RQM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Team Concert (RTC) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Requirements Composer (RRC) 4.x through 4.0.7; and Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5 allows remote authenticated users to inject arbitra
Next Generation (RDNG) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21960407
CVE ID: CVE-2015-0131 State: PUBLISHED Published: 2015-06-28T22:00:00 Last Updated: 2024-08-06T03:55:28.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21902807
CVE ID: CVE-2015-0132 State: PUBLISHED Published: 2015-03-18T10:00:00 Last Updated: 2024-08-06T04:03:09.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before 4.0.7 iFix3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.c
, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698248
CVE ID: CVE-2015-0133 State: PUBLISHED Published: 2015-03-13T01:00:00 Last Updated: 2024-08-06T04:03:08.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce 7.0 Feature Pack 4 through 8 allows remote attackers to read arbitrary files and possibly obtain administrative privileges via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031881 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52499 - http://www-01.ibm.com/support/docview.wss?uid=swg21696242
CVE ID: CVE-2015-0134 State: PUBLISHED Published: 2015-04-06T00:00:00 Last Updated: 2024-08-06T04:03:09.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before IF7, and 9.0.1 before FP2 IF3 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700029 - http://www.securitytracker.com/id/1032027
CVE ID: CVE-2015-0135 State: PUBLISHED Published: 2015-04-21T16:00:00 Last Updated: 2024-08-06T04:03:08.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or cause a denial of service (integer truncation and application crash) via a crafted GIF image, aka SPR KLYH9T7NT9. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21701647 - http://www.securitytracker.com/id/1032151
CVE ID: CVE-2015-0136 State: PUBLISHED Published: 2015-03-24T00:00:00 Last Updated: 2024-08-06T04:03:08.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command line during IVM and PowerKVM management, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020608
CVE ID: CVE-2015-0137 State: PUBLISHED Published: 2015-03-24T00:00:00 Last Updated: 2024-08-06T04:03:09.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020611
CVE ID: CVE-2015-0138 State: PUBLISHED Published: 2015-03-25T01:00:00 Last Updated: 2024-08-06T04:03:09.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server (ISDS) 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204. Additio
RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1007.html - http://www.securityfocus.com/bid/73326 - http://rhn.redhat.com/errata/RHSA-2015-1006.html - http://rhn.redhat.com/errata/RHSA-2015-1091.html - http://www-01.ibm.com/support/docview.wss?uid=swg21698703 - http://www-01.ibm.com/support/docview.wss?uid=swg21883640 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html - http://rhn.redhat.com/errata/RHSA-2015-1020.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html - htt
redhat.com/errata/RHSA-2015-1020.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html - http://rhn.redhat.com/errata/RHSA-2015-1021.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html
CVE ID: CVE-2015-0139 State: PUBLISHED Published: 2015-03-13T01:00:00 Last Updated: 2024-08-06T04:03:09.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21697213 - http://www.securitytracker.com/id/1031880 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI33329
CVE ID: CVE-2015-0140 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T04:03:09.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21697746
CVE ID: CVE-2015-0141 State: PUBLISHED Published: 2015-10-03T22:00:00 Last Updated: 2024-08-06T04:03:10.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to modify arbitrary user filters via a JSON request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963358
CVE ID: CVE-2015-0142 State: PUBLISHED Published: 2015-10-03T22:00:00 Last Updated: 2024-08-06T04:03:09.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to cause a denial of service (maintenance-mode transition and data-storage outage) by calling the System Administration Mode function. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963358
CVE ID: CVE-2015-0143 State: PUBLISHED Published: 2015-10-03T22:00:00 Last Updated: 2024-08-06T04:03:09.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to obtain sensitive information by reading error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963358
CVE ID: CVE-2015-0144 State: PUBLISHED Published: 2015-10-03T22:00:00 Last Updated: 2024-08-06T04:03:09.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8916. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963358
CVE ID: CVE-2015-0145 State: PUBLISHED Published: 2015-10-03T22:00:00 Last Updated: 2024-08-06T04:03:09.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963358
CVE ID: CVE-2015-0146 State: PUBLISHED Published: 2015-03-18T10:00:00 Last Updated: 2024-08-06T04:03:09.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services, which allows local users to bypass intended document-access restrictions and obtain sensitive information via a crafted search query. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21696594
CVE ID: CVE-2015-0149 State: PUBLISHED Published: 2015-03-18T10:00:00 Last Updated: 2024-08-06T04:03:10.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API calls. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LI78430 - http://www-01.ibm.com/support/docview.wss?uid=swg21696693
CVE ID: CVE-2015-0150 State: PUBLISHED Published: 2018-04-12T21:00:00 Last Updated: 2024-08-06T04:03:10.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110583 - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF
CVE ID: CVE-2015-0151 State: PUBLISHED Published: 2018-04-12T21:00:00 Last Updated: 2024-08-06T04:03:10.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110584 - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF
CVE ID: CVE-2015-0152 State: PUBLISHED Published: 2018-04-12T21:00:00 Last Updated: 2024-08-06T04:03:10.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF - https://exchange.xforce.ibmcloud.com/vulnerabilities/110585
CVE ID: CVE-2015-0153 State: PUBLISHED Published: 2018-04-12T21:00:00 Last Updated: 2024-08-06T04:03:10.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF - https://exchange.xforce.ibmcloud.com/vulnerabilities/110586
CVE ID: CVE-2015-0154 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-0155 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-0156 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T04:03:10.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.6.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21697120 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT06812 - http://www-01.ibm.com/support/docview.wss?uid
=swg21697120 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT06812 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52420
CVE ID: CVE-2015-0157 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T04:03:10.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by leveraging an unspecified scalar function in a SQL statement. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07108 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07103 - http://www-01.ibm.com/support/docview.wss?uid=swg21697987 - http://www.securityfocus.com/bid/75
ew.wss?uid=swg1IT07103 - http://www-01.ibm.com/support/docview.wss?uid=swg21697987 - http://www.securityfocus.com/bid/75947 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07107 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07109 - http://www.securitytracker.com/id/1032882
CVE ID: CVE-2015-0158 State: PUBLISHED Published: 2015-03-24T01:00:00 Last Updated: 2024-08-06T04:03:09.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Coach NG framework in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52137 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52322 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52355 - http://www-01.ibm.com/support/
docview.wss?uid=swg1JR52322 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52355 - http://www-01.ibm.com/support/docview.wss?uid=swg21696378 - http://www.securitytracker.com/id/1031964
CVE ID: CVE-2015-0159 State: REJECTED Published: 2015-03-25T01:00:00 Last Updated: 2015-03-25T01:57:00 Description: No description available.
CVE ID: CVE-2015-0160 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T04:03:10.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21699470
CVE ID: CVE-2015-0161 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T04:03:10.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21699470
CVE ID: CVE-2015-0162 State: PUBLISHED Published: 2017-09-20T18:00:00 Last Updated: 2024-08-06T04:03:09.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74038 - https://www-01.ibm.com/support/docview.wss?uid=swg21700012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100865
CVE ID: CVE-2015-0163 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-0164 State: REJECTED Published: 2017-09-15T15:00:00 Last Updated: 2017-09-15T14:57:01 Description: No description available.
CVE ID: CVE-2015-0165 State: REJECTED Published: 2017-09-15T15:00:00 Last Updated: 2017-09-15T14:57:01 Description: No description available.
CVE ID: CVE-2015-0166 State: REJECTED Published: 2017-09-15T15:00:00 Last Updated: 2017-09-15T14:57:01 Description: No description available.
CVE ID: CVE-2015-0167 State: PUBLISHED Published: 2015-02-20T16:00:00 Last Updated: 2024-08-06T04:03:10.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in textAngular-sanitize.js in textAngular before 1.3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the editor. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fraywing/textAngular/releases/tag/v1.3.7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100929
CVE ID: CVE-2015-0168 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T04:03:09.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21699470
CVE ID: CVE-2015-0169 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T04:03:10.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arguments via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21699470
CVE ID: CVE-2015-0170 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T04:03:09.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows local users to obtain sensitive information by reading cached data. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21699470
CVE ID: CVE-2015-0171 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T04:03:10.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21699470