Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3033 State: PUBLISHED Published: 2014-08-26T10:00:00 Last Updated: 2024-08-06T10:28:46.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93192 - http://secunia.com/advisories/60481 - http://www-01.ibm.com/support/docview.wss?uid=swg21680665
CVE ID: CVE-2014-3034 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T10:28:46.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93193 - http://www-01.ibm.com/support/docview.wss?uid=swg21680370
CVE ID: CVE-2014-3035 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T10:28:46.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60480 - http://www-01.ibm.com/support/docview.wss?uid=swg21681277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93194
CVE ID: CVE-2014-3036 State: PUBLISHED Published: 2014-06-08T23:00:00 Last Updated: 2024-08-06T10:28:46.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93302 - http://www-01.ibm.com/support/docview.wss?uid=swg21674232 - http://secunia.com/advisories/59044 - http://www-01.ibm.com/support/docvi
.ibm.com/support/docview.wss?uid=swg21674232 - http://secunia.com/advisories/59044 - http://www-01.ibm.com/support/docview.wss?uid=swg1LI78000
CVE ID: CVE-2014-3037 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T10:28:46.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational Engineering Lifecycle Manager before 4.0.7 and 5.x before 5.0.1, Rational Software Architect Design Manager before 4.0.7 and 5.x before 5.0.1, and Rational Rhapsody Design Manager before 4.0.7 and 5.x before 5.0.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - https://excha
s for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93303 - http://www.securityfocus.com/bid/69658 - http://www-01.ibm.com/support/docview.wss?uid=swg21682120 - http://secunia.com/advisories/61071 - http://secunia.com/advisories/60649
CVE ID: CVE-2014-3038 State: PUBLISHED Published: 2014-06-08T23:00:00 Last Updated: 2024-08-06T10:28:46.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging (1) gid 0 or (2) root's group memberships. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93304 - http://secunia.com/advisories/59244 - http://www-01.ibm.com/support/docview.wss?uid=swg21675043
CVE ID: CVE-2014-3040 State: PUBLISHED Published: 2014-08-26T10:00:00 Last Updated: 2024-08-06T10:28:46.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2; Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4; and Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to hijack the authentication of arbitrary users fo
0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60480 - http://secunia.com/advisories/60479 - http://www-01.ibm.com/support/docview.wss?uid=swg21681277 - http://secunia.com/advisories/60481 - http://www-01.ibm.com/support/docview.wss?uid=swg21680370 - http://www-01.ibm.com/support/docview.wss?uid=swg21680665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93306
CVE ID: CVE-2014-3041 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T10:28:46.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93318 - http://secunia.com/advisories/60479 - http://www-01.ibm.com/support/docview.wss?uid=swg21680370
CVE ID: CVE-2014-3042 State: PUBLISHED Published: 2014-06-10T10:00:00 Last Updated: 2024-08-06T10:28:46.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service (storage overlay) by using a 3270 emulator to send an invalid 3270 data stream. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16710 - http://www.securityfocus.com/bid/67944 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16727 - http://www-01.ibm.com/support/docview.wss?uid=
m/bid/67944 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16727 - http://www-01.ibm.com/support/docview.wss?uid=swg21675195 - http://secunia.com/advisories/59242 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93338
CVE ID: CVE-2014-3043 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2024-08-06T10:28:46.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the service account. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004811
CVE ID: CVE-2014-3045 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2024-08-06T10:28:46.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Scale Out Network Attached Storage (SONAS) 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the shell history upon use of the -p option to chuser, which allows local users to obtain sensitive information by leveraging root access. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004815
CVE ID: CVE-2014-3048 State: PUBLISHED Published: 2014-06-08T23:00:00 Last Updated: 2024-08-06T10:28:46.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the IBM System Storage Virtualization Engine TS7700 allows local users to gain privileges by leveraging the TSSC service-user role to enter a crafted SSH command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93434 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004653 - http://www.securityfocus.com/bid/67942
CVE ID: CVE-2014-3050 State: PUBLISHED Published: 2014-07-29T20:00:00 Last Updated: 2024-08-06T10:28:46.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engines, which allows remote authenticated users to discover credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21679192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93436
CVE ID: CVE-2014-3051 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T10:28:46.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30, and 7.4 before 7.4.0.0 IF18 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain credential information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682290 - http://secunia.com/advisories/59756 - h
ainer: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682290 - http://secunia.com/advisories/59756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93444
CVE ID: CVE-2014-3052 State: PUBLISHED Published: 2014-06-21T15:00:00 Last Updated: 2024-08-06T10:28:46.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reverse-proxy feature in IBM Security Access Manager (ISAM) for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interprets the jct-nist-compliance parameter in the opposite of the intended manner, which makes it easier for remote attackers to obtain sensitive information by leveraging weak SSL encryption settings that lack NIST SP 800-131A compliance. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676705 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV615
s: - http://www-01.ibm.com/support/docview.wss?uid=swg21676705 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV61553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93454
CVE ID: CVE-2014-3053 State: PUBLISHED Published: 2014-06-21T15:00:00 Last Updated: 2024-08-06T10:28:46.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid credentials. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93501 - http://secunia.com/advisories/59381 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV61557
vulnerabilities/93501 - http://secunia.com/advisories/59381 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV61557 - http://secunia.com/advisories/59438 - http://www-01.ibm.com/support/docview.wss?uid=swg21676700 - http://www-01.ibm.com/support/docview.wss?uid=swg21676389 - http://www.securityfocus.com/bid/68132
CVE ID: CVE-2014-3054 State: PUBLISHED Published: 2014-07-29T20:00:00 Last Updated: 2024-08-06T10:28:46.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60499 - http://www-01.ibm.com/support/docview.wss?uid=swg21677032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93528 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI18
32 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93528 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909
CVE ID: CVE-2014-3055 State: PUBLISHED Published: 2014-07-29T20:00:00 Last Updated: 2024-08-06T10:28:46.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60499 - http://www-01.ibm.com/support/docview.wss?uid=swg21677032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93529 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909
CVE ID: CVE-2014-3056 State: PUBLISHED Published: 2014-07-29T20:00:00 Last Updated: 2024-08-06T10:28:46.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60499 - http://www-01.ibm.com/support/docview.wss?uid=swg21677032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93530 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909
CVE ID: CVE-2014-3057 State: PUBLISHED Published: 2014-07-29T20:00:00 Last Updated: 2024-08-06T10:28:46.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60499 - http://www-01.ibm.com/support/docview.wss?uid=swg21677032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93531 - http://www.securityfocus.com/bid/68928 - http://www-01.ibm.com/support/docview.wss?uid=s
oud.com/vulnerabilities/93531 - http://www.securityfocus.com/bid/68928 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909
CVE ID: CVE-2014-3058 State: PUBLISHED Published: 2014-12-11T16:00:00 Last Updated: 2024-08-06T10:28:46.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93532 - http://www-01.ibm.com/support/docview.wss?uid=swg21691035 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04614
CVE ID: CVE-2014-3059 State: PUBLISHED Published: 2014-10-02T00:00:00 Last Updated: 2024-08-06T10:28:46.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21685705 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93533
CVE ID: CVE-2014-3060 State: PUBLISHED Published: 2014-10-02T00:00:00 Last Updated: 2024-08-06T10:28:46.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21685705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93534 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
CVE ID: CVE-2014-3061 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T10:28:46.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60480 - http://www-01.ibm.com/support/docview.wss?uid=swg21681277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93537
CVE ID: CVE-2014-3062 State: PUBLISHED Published: 2014-09-27T10:00:00 Last Updated: 2024-08-06T10:28:46.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR2 and 7.2 MR2 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93540 - http://www-01.ibm.com/support/docview.wss?uid=swg21683609
CVE ID: CVE-2014-3063 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T10:35:55.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 allow local users to obtain administrator privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21680403 - http://secunia.com/advisories/60680 - http://secunia.com/advisories/60694 - https://ex
ort/docview.wss?uid=swg21680403 - http://secunia.com/advisories/60680 - http://secunia.com/advisories/60694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93599 - http://secunia.com/advisories/60695
CVE ID: CVE-2014-3064 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2024-08-06T10:35:55.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to read arbitrary files via a crafted UNIX file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93600 - http://www-01.ibm.com/support/docview.wss?uid=swg21677299
CVE ID: CVE-2014-3065 State: PUBLISHED Published: 2014-12-02T01:00:00 Last Updated: 2024-08-06T10:35:55.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1880.html - http://rhn.redhat.com/errata/RHSA-2014-1877.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66045 - http
ml - http://rhn.redhat.com/errata/RHSA-2014-1877.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66045 - http://www-01.ibm.com/support/docview.wss?uid=swg21688283 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66044 - http://rhn.redhat.com/errata/RHSA-2014-1881.html - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html - http://rhn.redhat.com/errata/RHSA-2014-1876.html - http://rhn.redhat.com/errata/RHSA-2015-0264.html - https://bugzilla.redhat.com/show_bug.cgi?id=1162554 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html - http://lists.opensuse.org/
cgi?id=1162554 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html - http://rhn.redhat.com/errata/RHSA-2014-1882.html - http://www.securityfocus.com/bid/71147 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
CVE ID: CVE-2014-3066 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T10:35:55.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58672 - http://secunia.com/advisories/58906 - http://www-01.ibm.com/support/docview.wss?uid=swg21673967 - http://www.securitytracker.com/id/1030508 - http://www-01.ibm.com/support/docview.wss?uid=
docview.wss?uid=swg21673967 - http://www.securitytracker.com/id/1030508 - http://www-01.ibm.com/support/docview.wss?uid=swg21673961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93630
CVE ID: CVE-2014-3068 State: PUBLISHED Published: 2014-12-02T01:00:00 Last Updated: 2024-08-06T10:35:55.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93756 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66876 - http://www-01.ibm.com/support/docvi
/vulnerabilities/93756 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66876 - http://www-01.ibm.com/support/docview.wss?uid=swg21691089 - https://bugzilla.redhat.com/show_bug.cgi?id=1164201 - http://rhn.redhat.com/errata/RHSA-2015-0264.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66894