Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2871 State: PUBLISHED Published: 2016-11-30T18:00:00 Last Updated: 2024-08-05T23:40:13.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94861 - http://www-01.ibm.com/support/docview.wss?uid=swg21987769
CVE ID: CVE-2016-2872 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T23:40:13.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985775
CVE ID: CVE-2016-2873 State: PUBLISHED Published: 2016-11-30T18:00:00 Last Updated: 2024-08-05T23:40:13.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95000 - http://www-01.ibm.com/support/docview.wss?uid=swg21987770
CVE ID: CVE-2016-2874 State: PUBLISHED Published: 2016-11-30T18:00:00 Last Updated: 2024-08-05T23:40:13.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21987771 - http://www.securityfocus.com/bid/95003
CVE ID: CVE-2016-2875 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T23:40:14.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS commands as root via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92333 - http://www-01.ibm.com/support/docview.wss?uid=swg21988094
CVE ID: CVE-2016-2876 State: PUBLISHED Published: 2016-11-30T18:00:00 Last Updated: 2024-08-05T23:40:13.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users to obtain root access by leveraging a command-injection issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21987774 - http://www.securityfocus.com/bid/95001
CVE ID: CVE-2016-2877 State: PUBLISHED Published: 2016-11-30T18:00:00 Last Updated: 2024-08-05T23:40:13.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by writing to a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95002 - http://www-01.ibm.com/support/docview.wss?uid=swg21987773
CVE ID: CVE-2016-2878 State: PUBLISHED Published: 2016-11-30T18:00:00 Last Updated: 2024-08-05T23:40:13.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21987776 - http://www.securityfocus.com/bid/95004
CVE ID: CVE-2016-2879 State: PUBLISHED Published: 2017-03-01T21:00:00 Last Updated: 2024-08-05T23:40:13.741Z Vendors: IBM Corporation Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM Reference #: 1997341. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997341 - http://www.securityfocus.com/bid/96502
CVE ID: CVE-2016-2880 State: PUBLISHED Published: 2017-03-01T21:00:00 Last Updated: 2024-08-05T23:40:13.697Z Vendors: IBM Corporation Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user. IBM Reference #: 1997340. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96614 - http://www.ibm.com/support/docview.wss?uid=swg21997340
CVE ID: CVE-2016-2881 State: PUBLISHED Published: 2016-11-30T20:00:00 Last Updated: 2024-08-05T23:40:13.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2 before 7.2.7 allow remote attackers to bypass intended access restrictions via modified request parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21987777
CVE ID: CVE-2016-2882 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T23:40:13.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983343 - http://www.securityfocus.com/bid/91552
CVE ID: CVE-2016-2883 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T23:40:13.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983347
CVE ID: CVE-2016-2884 State: PUBLISHED Published: 2016-11-30T20:00:00 Last Updated: 2024-08-05T23:40:13.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an unspecified non-default configuration, allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21987252 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89686
CVE ID: CVE-2016-2887 State: PUBLISHED Published: 2016-11-30T20:00:00 Last Updated: 2024-08-05T23:40:13.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94611 - http://www-01.ibm.com/support/docview.wss?uid=swg21982967
CVE ID: CVE-2016-2888 State: PUBLISHED Published: 2016-07-08T01:00:00 Last Updated: 2024-08-05T23:40:13.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0313 and CVE-2016-0350. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE ID: CVE-2016-2889 State: PUBLISHED Published: 2016-07-08T01:00:00 Last Updated: 2024-08-05T23:40:13.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016, 6.0 and 6.0.1 before 6.0.1 ifix005, and 6.0.2 before ifix002 allows remote authenticated users to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91766 - http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE ID: CVE-2016-2894 State: PUBLISHED Published: 2016-07-03T21:00:00 Last Updated: 2024-08-05T23:40:13.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985579 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT13686 - http://www.securityfocus.com/bid/
view.wss?uid=swg21985579 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT13686 - http://www.securityfocus.com/bid/91534 - http://www.securitytracker.com/id/1036220
CVE ID: CVE-2016-2901 State: PUBLISHED Published: 2016-06-26T01:00:00 Last Updated: 2024-08-05T23:40:13.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI62594 - http://www.securitytracker.com/id/1036143 - http://www-01.ibm.com/support/docview.wss?uid=swg21983974
CVE ID: CVE-2016-2908 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:13.568Z Vendors: IBM Corporation Products: Access Manager Problem Types: Denial of Service Description: IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95295 - http://www.ibm.com/support/docview.wss?uid=swg21995531 - http://www.securitytracker.com/
w.securityfocus.com/bid/95295 - http://www.ibm.com/support/docview.wss?uid=swg21995531 - http://www.securitytracker.com/id/1038506
CVE ID: CVE-2016-2912 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T23:40:13.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988263 - http://www.securityfocus.com/bid/92335
CVE ID: CVE-2016-2914 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T23:40:14.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92334 - http://www-01.ibm.com/support/docview.wss?uid=swg21988263
CVE ID: CVE-2016-2917 State: PUBLISHED Published: 2016-11-30T20:00:00 Last Updated: 2024-08-05T23:40:14.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users to obtain sensitive password information, and consequently gain privileges, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21984304 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV84740
CVE ID: CVE-2016-2922 State: PUBLISHED Published: 2018-08-13T16:00:00Z Last Updated: 2024-09-16T23:10:24.966Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational ClearQuest Problem Types: Obtain Information Description: IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SSL certificate against the requested hostname. It is subject to a man-in-the-middle attack with an impersonating server observing all the data transmitted to the real server. IBM X-Force ID: 113353. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docvi
M X-Force ID: 113353. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10718377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113353
CVE ID: CVE-2016-2923 State: PUBLISHED Published: 2016-07-07T14:00:00 Last Updated: 2024-08-05T23:40:13.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 8.5 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified JAX-RS API cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91518 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI61936 - http://www-01.ibm.com/support/docview.wss?uid=swg
id/91518 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI61936 - http://www-01.ibm.com/support/docview.wss?uid=swg21983700
CVE ID: CVE-2016-2924 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-05T23:40:13.725Z Vendors: IBM Corporation Products: BigInsights Problem Types: Cross-Site Scripting Description: IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - htt
e victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95973 - http://www.ibm.com/support/docview.wss?uid=swg21987499
CVE ID: CVE-2016-2925 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T23:40:13.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1 CF21, and 8.5.0 before CF10 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036454 - http://www-01.ibm.com/support/docview.wss?uid=swg21986461 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI62749 - http://w
ww-01.ibm.com/support/docview.wss?uid=swg21986461 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI62749 - http://www.securityfocus.com/bid/92180
CVE ID: CVE-2016-2926 State: PUBLISHED Published: 2016-11-25T20:00:00 Last Updated: 2024-08-05T23:40:13.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Team Concert 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Engineering Lifecycle Manager 4.x before
re 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94146 - http://www.securitytracker.com/id/1037279 - http://www.securitytracker.com/id/10
ttp://www.securityfocus.com/bid/94146 - http://www.securitytracker.com/id/1037279 - http://www.securitytracker.com/id/1037277 - http://www.securitytracker.com/id/1037278 - http://www-01.ibm.com/support/docview.wss?uid=swg21993444 - http://www.securitytracker.com/id/1037276
CVE ID: CVE-2016-2927 State: PUBLISHED Published: 2016-11-25T20:00:00 Last Updated: 2024-08-05T23:40:13.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94561 - http://www-01.ibm.com/support/docview.wss?uid=swg21991875 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792
CVE ID: CVE-2016-2928 State: PUBLISHED Published: 2016-11-25T20:00:00 Last Updated: 2024-08-05T23:40:13.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89748 - http://www-01.ibm.com/support/docview.wss?uid=swg21991951 - http://www.securityfocus.com/bid/94556
CVE ID: CVE-2016-2929 State: PUBLISHED Published: 2016-11-25T20:00:00 Last Updated: 2024-08-05T23:40:13.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991880 - http://www.securityfocus.com/bid/94560 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89789
CVE ID: CVE-2016-2930 State: PUBLISHED Published: 2017-05-03T17:00:00 Last Updated: 2024-08-05T23:40:13.759Z Vendors: IBM Corporation Products: BigFix Remote Control Problem Types: Gain Access Description: IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication. IBM X-Force ID: 5512. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98304 - http://www.ibm.com/support/docview.wss?uid=swg22002331
CVE ID: CVE-2016-2931 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991876 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89791 - http://www.securityfocus.com/bid/94984
CVE ID: CVE-2016-2932 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89787 - http://www.securityfocus.com/bid/94983 - http://www-01.ibm.com/support/docview.wss?uid=swg21991882
CVE ID: CVE-2016-2933 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94986 - http://www-01.ibm.com/support/docview.wss?uid=swg21991892 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89780
CVE ID: CVE-2016-2934 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94987 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89795 - http://www-01.ibm.com/support/docview.wss?uid=swg21991870
CVE ID: CVE-2016-2935 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service via an invalid HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89745 - http://www.securityfocus.com/bid/94989 - http://www-01.ibm.com/support/docview.wss?uid=swg21991955
CVE ID: CVE-2016-2936 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94645 - http://www-01.ibm.com/support/docview.wss?uid=swg21991884 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89786