Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0853 State: PUBLISHED Published: 2014-02-25T21:00:00 Last Updated: 2024-08-06T09:27:20.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21665005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90754 - http://www.securityfocus.com/bid/65726
CVE ID: CVE-2014-0854 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:20.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90794 - http://www-01.ibm.com/support/docview.wss?u
: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90794 - http://www-01.ibm.com/support/docview.wss?uid=swg21662856
CVE ID: CVE-2014-0855 State: PUBLISHED Published: 2014-02-14T02:00:00 Last Updated: 2024-08-06T09:27:20.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Connections Portlets 4.x before 4.5.1 FP1 for IBM WebSphere Portal 7.0.0.2 and 8.0.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90802 - http://www-01.ibm.com/support/docview.wss?uid=swg21663921
CVE ID: CVE-2014-0857 State: PUBLISHED Published: 2014-05-01T17:00:00 Last Updated: 2024-08-06T09:27:20.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administrative Console in IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote authenticated users to obtain sensitive information via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://www.securityfocus.com/bid/67327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90863 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI07808 - http://www-01.ibm.com/support/docview.wss?u
bilities/90863 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI07808 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554
CVE ID: CVE-2014-0858 State: PUBLISHED Published: 2014-02-27T20:00:00 Last Updated: 2024-08-06T09:27:20.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to bypass intended access restrictions and conduct deleteAction attacks via a modified URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21665358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90864
CVE ID: CVE-2014-0859 State: PUBLISHED Published: 2014-05-01T17:00:00 Last Updated: 2024-08-06T09:27:20.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-server plugin in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, when POST retries are enabled, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90879 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI08892 - http://www-01.ibm.com/support/d
.com/vulnerabilities/90879 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI08892 - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://www.securityfocus.com/bid/67335 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554
CVE ID: CVE-2014-0860 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the firmware before 1.43 in IBM Integrated Management Module (IMM), and the firmware before 4.15 in IBM Integrated Management Module II (IMM2) contains cleartext IPMI credentials, which allows attackers to execute arbitrary IPMI commands, and consequently establish a blade remote-control session, by leveraging access to (1) the chassis internal network or (2) the Ethernet-over-USB interface. Additional Analyst Notes: - CVE Program Container: Referen
ssis internal network or (2) the Ethernet-over-USB interface. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90880 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095840
CVE ID: CVE-2014-0861 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:20.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is not properly handled during use of the Back button. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21662856
CVE ID: CVE-2014-0862 State: PUBLISHED Published: 2014-03-02T02:00:00 Last Updated: 2024-08-06T09:27:20.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90895 - http://www-01.ibm.com/support/docview.wss?uid=swg21664566
CVE ID: CVE-2014-0863 State: PUBLISHED Published: 2014-09-05T01:00:00 Last Updated: 2024-08-06T09:27:20.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in IBM Cognos TM1 9.5.2.3 before IF5, 10.1.1.2 before IF1, 10.2.0.2 before IF1, and 10.2.2.0 before IF1 stores obfuscated passwords in memory, which allows remote authenticated users to obtain sensitive cleartext information via an unspecified security tool. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682397 - http://www.securityfocus.com/bid/69594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90937 - http://www.securitytracker.com/id/1
tyfocus.com/bid/69594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90937 - http://www.securitytracker.com/id/1030805
CVE ID: CVE-2014-0864 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Executer in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to hijack the authentication of arbitrary users for requests that change (1) a deal's currency or (2) a limit via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - http://www.securityfocus.com/archiv
cketstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://secunia.com/advisories/59296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90938 - http://www-01.ibm.com/support/docview.wss?uid=swg21675881 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt - http://seclists.org/fulldisclosure/2014/Jun/173
CVE ID: CVE-2014-0865 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote authenticated users to bypass intended dual-control restrictions and modify data via crafted serialized objects, as demonstrated by limit manipulations. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90939 - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.htm
d.com/vulnerabilities/90939 - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://secunia.com/advisories/59296 - http://www-01.ibm.com/support/docview.wss?uid=swg21675881 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt - http://seclists.org/fulldisclosure/2014/Jun/173
CVE ID: CVE-2014-0866 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics sends cleartext credentials over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21675881 - https://exchange.xfor
.com/archive/1/532598/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21675881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90940 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt - http://seclists.org/fulldisclosure/2014/Jun/173
CVE ID: CVE-2014-0867 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90941 - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://www-01.ibm.com/support/docview.wss?u
ities/90941 - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21675881 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt - http://seclists.org/fulldisclosure/2014/Jun/173
CVE ID: CVE-2014-0868 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote authenticated users to bypass intended dual-control restrictions and modify data via a crafted XML document, as demonstrated by manipulation of read-only limit data. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - https://exchange.xforce.ibmcloud.com/vulnera
security.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90942 - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://secunia.com/advisories/59296 - http://www-01.ibm.com/support/docview.wss?uid=swg21675881 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt - http://seclists.org/fulldisclosure/2014/Jun/173
CVE ID: CVE-2014-0869 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decrypt function in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics does not require a key, which makes it easier for remote attackers to obtain cleartext passwords by sniffing the network and then providing a string argument to this function. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://
IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21675881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90943 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt - http://seclists.org/fulldisclosure/2014/Jun/173
CVE ID: CVE-2014-0870 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to inject arbitrary web script or HTML via (1) the Message parameter to rcore6/main/showerror.jsp, (2) the ButtonsetClass parameter to rcore6/main/buttonset.jsp, (3) the MBName parameter to rcore6/frameset.jsp, (4) the Init parameter to algopds/rcore6/main/browse.jsp, or the (5) Name, (6) StoreName, or (7) STYLESHEET parameter to algopds/rcore6/main
er to algopds/rcore6/main/browse.jsp, or the (5) Name, (6) StoreName, or (7) STYLESHEET parameter to algopds/rcore6/main/ibrowseheader.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90944 - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://secunia.com/advisories/59296 - http://www-01.ibm.com/support/docview.wss?uid=swg21675881 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt - http://seclists.org/fulldisclosure/2014
isories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt - http://seclists.org/fulldisclosure/2014/Jun/173
CVE ID: CVE-2014-0871 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to obtain potentially sensitive Tomcat stack-trace information via non-printing characters in a cookie to the /classes/ URI, as demonstrated by the \x00 character. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90945 - http://www.securityfo
mics-RICOS-Disclosure-XSS-CSRF.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90945 - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://secunia.com/advisories/59296 - http://www-01.ibm.com/support/docview.wss?uid=swg21675881 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt - http://seclists.org/fulldisclosure/2014/Jun/173
CVE ID: CVE-2014-0872 State: PUBLISHED Published: 2018-04-25T20:00:00 Last Updated: 2024-08-06T09:27:20.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation process in IBM Security Key Lifecycle Manager 2.5 stores unencrypted credentials, which might allow local users to obtain sensitive information by leveraging root access. IBM X-Force ID: 90988. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90988 - https://www.ibm.com/blogs/psirt/ibm-security-bulletin-unencrypted-credentials-stored-on-ibm-security-key-lifecycle-manager-server-cve-2014-0872/
CVE ID: CVE-2014-0873 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T09:27:20.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management (MDM) Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.15 allow remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21666462 - https://exchange.xforce.ib
Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21666462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90994
CVE ID: CVE-2014-0874 State: PUBLISHED Published: 2014-02-28T02:00:00 Last Updated: 2024-08-06T09:27:20.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21665362 - http://www.securityfocus.com/bid/65852 - http://www-01.ibm.com/support/docview.wss?uid=swg21668907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91002 - http://www.securitytracker.com/id/1030011
CVE ID: CVE-2014-0875 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Active Cloud Engine (ACE) in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68398 - http://www.ibm.com/support/docview.wss?uid=ssg1S1004738
CVE ID: CVE-2014-0876 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T09:27:20.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.2.5.2, 6.3.x before 6.3.2, and 6.4.x before 6.4.2 on Windows and OS X allows local users to cause a denial of service (application crash or hang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC95875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91063 - http://www-01
ibm.com/support/docview.wss?uid=swg1IC95875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91063 - http://www-01.ibm.com/support/docview.wss?uid=swg21673318
CVE ID: CVE-2014-0877 State: PUBLISHED Published: 2014-09-05T17:00:00 Last Updated: 2024-08-06T09:27:20.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Cognos TM1 10.2.0.2 before IF1 and 10.2.2.0 before IF1 allows remote attackers to bypass intended access restrictions by visiting the Rights page and then following a generated link. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91064
CVE ID: CVE-2014-0878 State: PUBLISHED Published: 2014-05-26T19:00:00 Last Updated: 2024-08-06T09:27:20.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59022 - htt
tor's output. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59022 - http://www-01.ibm.com/support/docview.wss?uid=swg21680750 - http://www-01.ibm.com/support/docview.wss?uid=swg21679610 - http://www-01.ibm.com/support/docview.wss?uid=swg21676672 - http://secunia.com/advisories/59058 - http://secunia.com/advisories/61264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91084 - http://www-01.ibm.com/support/docview.wss?uid=swg21689593 - http://www-01.ibm.com/support/docview.wss?uid=swg21681256 - http://www-01.ibm.com/support/docview.wss?uid=swg21674539 - http://www-01.ibm.com/support/docview.wss?uid=swg21686717 - http://www-01.ibm.com/supp
ort/docview.wss?uid=swg21674539 - http://www-01.ibm.com/support/docview.wss?uid=swg21686717 - http://www-01.ibm.com/support/docview.wss?uid=swg21683484 - http://www-01.ibm.com/support/docview.wss?uid=swg21673836 - http://www.ibm.com/support/docview.wss?uid=swg21677387 - http://secunia.com/advisories/59023 - http://www-01.ibm.com/support/docview.wss?uid=swg21676746 - http://www-01.ibm.com/support/docview.wss?uid=swg21672043 - http://www.securityfocus.com/bid/67601 - http://www-01.ibm.com/support/docview.wss?uid=swg21679713 - http://www.ibm.com/support/docview.wss?uid=swg21675343 - http://www-01.ibm.com/support/docview.wss?uid=swg21676703 - http://www.ibm.com/support/docview.wss?uid=swg2167558
5343 - http://www-01.ibm.com/support/docview.wss?uid=swg21676703 - http://www.ibm.com/support/docview.wss?uid=swg21675588
CVE ID: CVE-2014-0879 State: PUBLISHED Published: 2014-03-21T10:00:00 Last Updated: 2024-08-06T09:27:20.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Taskmaster Capture ActiveX control in IBM Datacap Taskmaster Capture 8.0.1, and 8.1 before FP2, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91115 - http://www-01.ibm.com/support/docview.wss?uid=swg21666888