Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0525 State: PUBLISHED Published: 2013-03-26T21:00:00 Last Updated: 2024-08-06T14:33:03.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8.5.x allow local users to inject arbitrary web script or HTML via a shared mail file, aka SPR DKEN8PDNTX. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82542 - http://www-01.ibm.com/support/docview.wss?uid=swg21628658
CVE ID: CVE-2013-0526 State: PUBLISHED Published: 2013-08-21T16:00:00 Last Updated: 2024-08-06T14:33:03.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) count or (2) size parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85367 - http://www.bitcloud.es/2013/08/vulnerabilidad-en-kvms-gcm1632-de-ibm.html - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIG
d.es/2013/08/vulnerabilidad-en-kvms-gcm1632-de-ibm.html - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093509
CVE ID: CVE-2013-0527 State: PUBLISHED Published: 2013-06-21T14:00:00 Last Updated: 2024-08-06T14:33:03.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not close pages upon the timeout of a session, which allows physically proximate attackers to obtain sensitive administrative-console information by reading the screen of an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640356 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC90479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8260
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC90479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82609
CVE ID: CVE-2013-0528 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2013-0529 State: PUBLISHED Published: 2013-06-21T14:00:00 Last Updated: 2024-08-06T14:33:03.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640356 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC90478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82611
CVE ID: CVE-2013-0531 State: PUBLISHED Published: 2013-09-08T16:00:00 Last Updated: 2024-08-06T14:33:05.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84707
CVE ID: CVE-2013-0532 State: PUBLISHED Published: 2013-03-29T10:00:00 Last Updated: 2024-08-06T14:33:05.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service via malformed HTTP data. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21631304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82595 - http://www-01.ibm.com/support/docview.wss
uid=swg21631304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82595 - http://www-01.ibm.com/support/docview.wss?uid=swg21626264
CVE ID: CVE-2013-0533 State: PUBLISHED Published: 2013-04-28T01:00:00 Last Updated: 2024-08-06T14:33:03.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82655 - http://www-01.ibm.com/support/docview.wss?uid=swg21633620
CVE ID: CVE-2013-0534 State: PUBLISHED Published: 2013-06-21T14:00:00 Last Updated: 2024-08-06T14:33:05.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21635218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82656
CVE ID: CVE-2013-0535 State: PUBLISHED Published: 2013-05-02T18:00:00 Last Updated: 2024-08-06T14:33:03.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82657 - http://www-01.ibm.com/support/docview.wss?uid=swg21635185 - http://www-01.ibm.com/support/docview.wss?uid=swg21635545
CVE ID: CVE-2013-0536 State: PUBLISHED Published: 2013-06-21T17:00:00 Last Updated: 2024-08-06T14:33:05.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that arrange for code to be executed during the next login session of a different user, aka SPR PJOK959J24. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82658 - http://www-01.ibm.com/support/docview.wss?uid=swg21633827
CVE ID: CVE-2013-0537 State: PUBLISHED Published: 2013-11-09T01:00:00 Last Updated: 2024-08-06T14:33:03.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21654355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84840
CVE ID: CVE-2013-0538 State: PUBLISHED Published: 2013-05-01T10:00:00 Last Updated: 2024-08-06T14:33:05.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83270 - http://www.kb.cert.org/vuls/id/912420 - http://www-01.ibm.com/support/docview.wss?uid=swg21633819
CVE ID: CVE-2013-0539 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:33:03.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82916 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC92007
CVE ID: CVE-2013-0540 State: PUBLISHED Published: 2013-04-24T10:00:00 Last Updated: 2024-08-06T14:33:05.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not enabled, does not properly validate authentication cookies, which allows remote authenticated users to bypass intended access restrictions via an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?&uid=swg21632423 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM81056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82695
CVE ID: CVE-2013-0541 State: PUBLISHED Published: 2013-04-24T10:00:00 Last Updated: 2024-08-06T14:33:05.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Windows, when a localOS registry is used in conjunction with WebSphere Identity Manger (WIM), allows local users to cause a denial of service (daemon crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82696 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM74909 - http://www-01.ibm.
orce.ibmcloud.com/vulnerabilities/82696 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM74909 - http://www-01.ibm.com/support/docview.wss?&uid=swg21632423
CVE ID: CVE-2013-0542 State: PUBLISHED Published: 2013-04-24T10:00:00 Last Updated: 2024-08-06T14:33:05.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via crafted field values. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82697 - http://www-01.ibm.com/support/docview.wss?&uid=swg21632423 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM81846
CVE ID: CVE-2013-0543 State: PUBLISHED Published: 2013-04-24T10:00:00 Last Updated: 2024-08-06T14:33:05.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux, Solaris, and HP-UX, when a Local OS registry is used, does not properly validate user accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82759 - http://www-01.ibm.com/support/docview.wss?&uid=swg21632423 - http://www-01.ibm.com
.ibmcloud.com/vulnerabilities/82759 - http://www-01.ibm.com/support/docview.wss?&uid=swg21632423 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM75582
CVE ID: CVE-2013-0544 State: PUBLISHED Published: 2013-04-24T10:00:00 Last Updated: 2024-08-06T14:33:05.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux and UNIX allows remote authenticated users to modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?&uid=swg21632423 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM82468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82760
CVE ID: CVE-2013-0548 State: PUBLISHED Published: 2013-06-21T17:00:00 Last Updated: 2024-08-06T14:33:05.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/su
HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115 - http://www-01.ibm.com/support/docview.wss?uid=swg21635080 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116 - http://www-01.ibm.com/support/docview.wss?uid=swg21640752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82767
CVE ID: CVE-2013-0549 State: PUBLISHED Published: 2013-06-03T21:00:00 Last Updated: 2024-08-06T14:33:05.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x through 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21638984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82762 - http://www-01.ibm.com/support/doc
iew.wss?uid=swg21638984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82762 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM84525
CVE ID: CVE-2013-0550 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2013-0551 State: PUBLISHED Published: 2013-06-21T17:00:00 Last Updated: 2024-08-06T14:33:05.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (abend) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115 - http://www-01.ibm.com/supp
Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115 - http://www-01.ibm.com/support/docview.wss?uid=swg21635080 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82768 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116 - http://www-01.ibm.com/support/docview.wss?uid=swg21640752
CVE ID: CVE-2013-0553 State: PUBLISHED Published: 2013-04-28T01:00:00 Last Updated: 2024-08-06T14:33:05.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual chat users, or to all participants in a chat room, via a crafted Sametime Instant Message (IM). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82915 - http://www-01.ibm.com/support/docview.wss?uid=swg21633618
CVE ID: CVE-2013-0558 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:33:05.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC90483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83006 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2013-0559 State: PUBLISHED Published: 2013-07-18T22:00:00 Last Updated: 2024-08-06T14:33:05.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21643847 - http://www-01.ibm.com/support/docview.wss?uid=swg1LI77499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85557
CVE ID: CVE-2013-0560 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:33:05.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83012 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2013-0565 State: PUBLISHED Published: 2013-04-24T10:00:00 Last Updated: 2024-08-06T14:33:05.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in IBM WebSphere Application Server (WAS) 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?&uid=swg21632423 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM83402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83138
CVE ID: CVE-2013-0566 State: PUBLISHED Published: 2013-08-27T01:00:00 Last Updated: 2024-08-06T14:33:05.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the (1) Accelerator JSPs, (2) Organization Administration Console JSPs, and (3) Administration Console JSPs in WebSphere Commerce Tools in IBM WebSphere Commerce 5.6.1.0 through 5.6.1.5, 6.0.0.0 through 6.0.0.11, and 7.0.0.0 through 7.0.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR46776 - https://exchange.xforce.
VE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR46776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83139 - http://www.ibm.com/support/docview.wss?uid=swg21647750
CVE ID: CVE-2013-0567 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:33:05.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, and CVE-2013-0475. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC91151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83164 - http://www-01.ibm.co
/support/docview.wss?uid=swg1IC91151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83164 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2013-0568 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:33:05.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0475, and CVE-2013-0567. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83165 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2013-0569 State: PUBLISHED Published: 2013-04-27T01:00:00 Last Updated: 2024-08-06T14:33:05.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Communities component in IBM Connections 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO74629 - http://www-01.ibm.com/support/docview.wss?uid=swg21635059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83354
CVE ID: CVE-2013-0570 State: PUBLISHED Published: 2018-07-13T21:00:00 Last Updated: 2024-08-06T14:33:05.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network Technology (BNT) switches running IBM Networking Operating System (aka NOS, formerly BLADE Operating System) floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow remote attackers to obtain sensitive information in opportunistic circumstances by eavesdropping on the broadcast domain. IBM X-Force ID: 83166. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xf
cast domain. IBM X-Force ID: 83166. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83166 - https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715
CVE ID: CVE-2013-0571 State: PUBLISHED Published: 2013-04-27T01:00:00 Last Updated: 2024-08-06T14:33:05.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83246 - http://www-01.ibm.com/support/docview.wss?uid=swg21635328
CVE ID: CVE-2013-0572 State: PUBLISHED Published: 2013-04-27T01:00:00 Last Updated: 2024-08-06T14:33:05.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, and AIX allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21635328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83247