Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1410 State: PUBLISHED Published: 2018-02-19T14:00:00Z Last Updated: 2024-09-16T17:23:55.401Z Vendors: IBM Products: Client Application Access, Notes Problem Types: Gain Privileges Description: IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138709. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138709 - http://www.ibm.com/support/docview.wss?uid=swg22010766 - http://www.ibm.com/
force.ibmcloud.com/vulnerabilities/138709 - http://www.ibm.com/support/docview.wss?uid=swg22010766 - http://www.ibm.com/support/docview.wss?uid=swg22010767
CVE ID: CVE-2018-1411 State: PUBLISHED Published: 2018-02-19T14:00:00Z Last Updated: 2024-09-17T01:51:25.769Z Vendors: IBM Products: Client Application Access, Notes Problem Types: Gain Privileges Description: IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138710. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138710 - http://www.ibm.com/support/docview.wss?uid=swg22010766 - http://www.ibm.com/
force.ibmcloud.com/vulnerabilities/138710 - http://www.ibm.com/support/docview.wss?uid=swg22010766 - http://www.ibm.com/support/docview.wss?uid=swg22010767
CVE ID: CVE-2018-1413 State: PUBLISHED Published: 2018-05-07T13:00:00Z Last Updated: 2024-09-17T03:34:26.249Z Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138819. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040889 - http://www.ibm.com/support/docview.wss?uid=swg22016039 - https://exchange.xforce.ibmcloud.com/vulnerabilities
/1040889 - http://www.ibm.com/support/docview.wss?uid=swg22016039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138819 - http://www.securityfocus.com/bid/104117 - https://security.netapp.com/advisory/ntap-20190401-0003/ - https://security.netapp.com/advisory/ntap-20190329-0003/
CVE ID: CVE-2018-1414 State: PUBLISHED Published: 2018-02-22T19:00:00Z Last Updated: 2024-09-17T03:59:50.300Z Vendors: IBM Products: Maximo Asset Management Problem Types: Data Manipulation Description: IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 138820. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138820 - http://www.ibm.com/support/docview.wss?uid=swg22013797
CVE ID: CVE-2018-1415 State: PUBLISHED Published: 2018-02-22T19:00:00Z Last Updated: 2024-09-16T21:56:42.186Z Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138821. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22013796 - http://www.securityfocus.com/bid/103169 - https://exchange.xforce.ibmcloud.com/vuln
upport/docview.wss?uid=swg22013796 - http://www.securityfocus.com/bid/103169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138821
CVE ID: CVE-2018-1416 State: PUBLISHED Published: 2018-02-27T17:00:00Z Last Updated: 2024-09-16T18:03:04.138Z Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138822. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138822 - http://www.ibm.com/support/docview.wss?uid=swg22013706 - http://www.secur
e.xforce.ibmcloud.com/vulnerabilities/138822 - http://www.ibm.com/support/docview.wss?uid=swg22013706 - http://www.securityfocus.com/bid/103168
CVE ID: CVE-2018-1417 State: PUBLISHED Published: 2018-02-22T19:00:00Z Last Updated: 2024-09-16T19:11:02.846Z Severity: HIGH (CVSS 8.1 CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: IBM Products: SDK, Java Technology Edition Problem Types: Gain Privileges Description: Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138823 - http://www.securityfocus.com/bid/103216 - http://www.securitytracker.com/id/1040403 - https:/
m/vulnerabilities/138823 - http://www.securityfocus.com/bid/103216 - http://www.securitytracker.com/id/1040403 - https://access.redhat.com/errata/RHSA-2018:1463 - http://www.ibm.com/support/docview.wss?uid=isg3T1027315 - http://www.ibm.com/support/docview.wss?uid=swg22014937 - https://www.ibm.com/support/docview.wss?uid=swg22012965
CVE ID: CVE-2018-1418 State: PUBLISHED Published: 2018-04-26T14:00:00Z Last Updated: 2024-09-17T01:17:01.131Z Vendors: IBM Products: Security QRadar SIEM Problem Types: Gain Privileges Description: IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. IBM X-Force ID: 138824. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45005/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/138824 - http://www.ibm.com/support/docview.wss?uid=swg22015797
CVE ID: CVE-2018-1419 State: PUBLISHED Published: 2018-06-15T14:00:00Z Last Updated: 2024-09-16T20:57:17.398Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:L/AC:H/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 8.0 and 9.0, when configured to use a PAM module for authentication, could allow a user to cause a deadlock in the IBM MQ PAM code which could result in a denial of service. IBM X-Force ID: 138949. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22014650 - http://www.securityfocus.com/bid/104488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13
.wss?uid=swg22014650 - http://www.securityfocus.com/bid/104488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138949
CVE ID: CVE-2018-1420 State: PUBLISHED Published: 2018-10-01T15:00:00Z Last Updated: 2024-09-16T17:47:39.664Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:H/AV:N/C:N/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Portal Problem Types: Data Manipulation Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138950 - https://www.ibm.com/support/docview.wss
ner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138950 - https://www.ibm.com/support/docview.wss?uid=swg22014276 - http://www.securitytracker.com/id/1041767
CVE ID: CVE-2018-1421 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T22:25:52.548Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: IBM Products: DataPower Gateways Problem Types: Obtain Information Description: IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139023. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139023 - http://
lyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139023 - http://www.ibm.com/support/docview.wss?uid=swg22015055
CVE ID: CVE-2018-1422 State: PUBLISHED Published: 2018-08-06T14:00:00Z Last Updated: 2024-09-17T00:56:57.377Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation products (IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.5) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139025. Additional Analyst Notes: - CVE Prog
leading to credentials disclosure within a trusted session. IBM X-Force ID: 139025. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139025 - http://www.securityfocus.com/bid/105003 - http://www.ibm.com/support/docview.wss?uid=ibm10719817
CVE ID: CVE-2018-1423 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-17T03:03:51.247Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational DOORS Next Generation, Rational Rhapsody Design Manager, Rational Quality Manager, Rational Engineering Lifecycle Manager, Rational Software Architect Design Manager, Rational Team Concert Problem Types: Obtain Information Description: IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026. Additional An
n authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139026 - http://www.ibm.com/support/docview.wss?uid=ibm10716599
CVE ID: CVE-2018-1424 State: PUBLISHED Published: 2018-12-07T16:00:00Z Last Updated: 2024-09-16T16:13:08.628Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Marketing Platform Problem Types: Obtain Information Description: IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139029. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139029 - http://www.security
- CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139029 - http://www.securityfocus.com/bid/106201 - http://www.ibm.com/support/docview.wss?uid=ibm10744217
CVE ID: CVE-2018-1425 State: PUBLISHED Published: 2018-02-27T17:00:00Z Last Updated: 2024-09-17T01:20:30.900Z Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 139003. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139033 - http://www.ibm.com/support/docview.wss?uid=swg22013751 - http://www.securityfocus.com/bid/103229
CVE ID: CVE-2018-1426 State: PUBLISHED Published: 2018-03-22T12:00:00Z Last Updated: 2024-09-16T21:04:29.258Z Severity: HIGH (CVSS 7.4 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Access Description: IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22013756 - https://exchange.xforce.ibmclo
Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22013756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/139071 - http://www.securityfocus.com/bid/105580 - http://www.securitytracker.com/id/1041012
CVE ID: CVE-2018-1427 State: PUBLISHED Published: 2018-03-22T12:00:00Z Last Updated: 2024-09-16T17:43:56.777Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:H/AC:L/AV:L/C:N/I:N/PR:N/S:U/UI:N) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Denial of Service Description: IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could overflow and cause a denial of service. IBM X-Force ID: 139072. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139072 - http://www.ibm.com/support/docview.wss?uid=swg22013756 - http://www.securityfocus.co
mcloud.com/vulnerabilities/139072 - http://www.ibm.com/support/docview.wss?uid=swg22013756 - http://www.securityfocus.com/bid/103536 - http://www.securitytracker.com/id/1041012
CVE ID: CVE-2018-1428 State: PUBLISHED Published: 2018-03-22T12:00:00Z Last Updated: 2024-09-16T17:18:52.141Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 139073. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139073 - http://www.ibm.com/support/docview.wss?uid=swg22013756 - http://www.s
hange.xforce.ibmcloud.com/vulnerabilities/139073 - http://www.ibm.com/support/docview.wss?uid=swg22013756 - http://www.securityfocus.com/bid/103574 - http://www.securitytracker.com/id/1041012
CVE ID: CVE-2018-1429 State: PUBLISHED Published: 2018-03-23T19:00:00Z Last Updated: 2024-09-16T18:55:24.166Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: IBM Products: MQ Appliance Problem Types: Cross-Site Scripting Description: IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139077. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040564 - http://www.ibm.com
nal Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040564 - http://www.ibm.com/support/docview.wss?uid=swg22014046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/139077 - http://www.securityfocus.com/bid/103491
CVE ID: CVE-2018-1430 State: PUBLISHED Published: 2018-04-30T14:00:00Z Last Updated: 2024-09-16T20:41:56.730Z Vendors: IBM Products: API Connect Problem Types: Cross-Site Scripting Description: IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139226. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139226 - http://www.securityfocus.com/bid/104027 - http://www.ibm.com/support/docview.wss?u
ibmcloud.com/vulnerabilities/139226 - http://www.securityfocus.com/bid/104027 - http://www.ibm.com/support/docview.wss?uid=swg22013058
CVE ID: CVE-2018-1431 State: PUBLISHED Published: 2018-06-13T14:00:00Z Last Updated: 2024-09-17T00:26:35.956Z Severity: HIGH (CVSS 7.4 CVSS:3.0/A:H/AC:H/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Gain Privileges Description: A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node. IBM X-Force ID: 139240. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com
-Force ID: 139240. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139240 - http://www.securityfocus.com/bid/105546 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012049
CVE ID: CVE-2018-1432 State: PUBLISHED Published: 2018-06-05T15:00:00Z Last Updated: 2024-09-17T01:05:56.077Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to cross-frame scripting which is a vulnerability that allows an attacker to load Information Server components inside an HTML iframe tag on a malicious page. The attacker could use this weakness to devise a Clickjacking attack to conduct phishing, frame sniffing, social engineering or Cross-Site Request Forgery attacks. IBM
Clickjacking attack to conduct phishing, frame sniffing, social engineering or Cross-Site Request Forgery attacks. IBM X-Force ID: 139360. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22014911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/139360 - http://www.securitytracker.com/id/1041039
CVE ID: CVE-2018-1433 State: PUBLISHED Published: 2018-05-17T21:00:00 Last Updated: 2024-08-05T03:59:39.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler /DownloadFile does not require authentication to read arbitrary files from the system. IBM X-Force ID: 139473. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139473 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - http://www.securityfocus.com/bi
d.com/vulnerabilities/139473 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - http://www.securityfocus.com/bid/104349 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012263 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE ID: CVE-2018-1434 State: PUBLISHED Published: 2018-05-17T21:00:00Z Last Updated: 2024-09-17T02:11:40.577Z Vendors: IBM Products: FlashSystem V9000, Storwize V3700, Storwize V5000, Spectrum Virtualize Software, SAN Volume Controller, Spectrum Virtualize for Public Cloud, Storwize V7000 (2076), Storwize V3500 Problem Types: Gain Access Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the
st forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139474. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/139474 - http://www.securityfocus.com/bid/104349 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012263 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE ID: CVE-2018-1435 State: PUBLISHED Published: 2018-03-14T00:00:00Z Last Updated: 2024-09-17T01:31:06.993Z Severity: HIGH (CVSS 7.8 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:R) Vendors: IBM Products: Notes Problem Types: Gain Access Description: IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in code execution. IBM X-Force ID: 139563. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139563 - http://www.ibm.com/support/docview.wss?uid=swg22014198 - http://www.securityfocus.com
cloud.com/vulnerabilities/139563 - http://www.ibm.com/support/docview.wss?uid=swg22014198 - http://www.securityfocus.com/bid/103404 - http://www.securitytracker.com/id/1040563
CVE ID: CVE-2018-1437 State: PUBLISHED Published: 2018-03-14T00:00:00Z Last Updated: 2024-09-16T19:46:06.111Z Severity: HIGH (CVSS 7.8 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:R) Vendors: IBM Products: Notes Problem Types: Gain Privileges Description: IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22014201 - http://ww
Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22014201 - http://www.securityfocus.com/bid/103401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/139565 - http://www.securitytracker.com/id/1040563
CVE ID: CVE-2018-1438 State: PUBLISHED Published: 2018-05-17T21:00:00 Last Updated: 2024-08-05T03:59:39.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler /DLSnap could allow an unauthenticated attacker to read arbitrary files on the system. IBM X-Force ID: 139566. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139566 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - http://www.securityfocus.com/bi
d.com/vulnerabilities/139566 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - http://www.securityfocus.com/bid/104349 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012263 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012283