Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5357 State: PUBLISHED Published: 2014-01-09T00:00:00 Last Updated: 2024-08-06T17:06:52.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55555 - http://secunia.com/secunia_research/2013-14/ - http://www.securitytracker.com/id/1029527 - https://support.google.com/picasa/answer/53209
CVE ID: CVE-2013-5358 State: PUBLISHED Published: 2014-01-09T00:00:00 Last Updated: 2024-08-06T17:06:52.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tags. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55555 - http://secunia.com/secunia_research/2013-14/ - http://www.securitytracker.com/id/1029527 - https://support.google.com/picasa/answer/53209
CVE ID: CVE-2013-5359 State: PUBLISHED Published: 2014-01-09T00:00:00 Last Updated: 2024-08-06T17:06:52.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a crafted RAW file, as demonstrated using a KDC file with a certain size. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55555 - http://secunia.com/secunia_research/2013-14/ - http://www.securitytracker.com/id/1029527 - https://support.google.com/picasa/answer/53209
CVE ID: CVE-2013-5364 State: PUBLISHED Published: 2014-01-26T01:00:00 Last Updated: 2024-08-06T17:06:52.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writable permissions for /etc/csia_config.xml, which allows local users to change CSI Agent configuration by modifying this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64775 - http://secunia.com/vulnerability_scanning/corporate/release-history/ - http://osvdb.org/101901 - http://secunia.com/advisories/56380 - https:/
nerability_scanning/corporate/release-history/ - http://osvdb.org/101901 - http://secunia.com/advisories/56380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90230
CVE ID: CVE-2013-5365 State: PUBLISHED Published: 2014-04-02T14:00:00 Last Updated: 2024-08-06T17:06:52.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file. Additional Analyst Notes: - CVE Program Container: References: - http://www.sketchbook.com/news/important-security-update-for-sketchbook.html - http://secunia.com/advisories/55000 - http://secunia.com/secunia_research/2014-5
CVE ID: CVE-2013-5369 State: PUBLISHED Published: 2013-09-16T16:00:00 Last Updated: 2024-08-06T17:06:52.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 might allow remote attackers to execute arbitrary code by deploying and accessing a service. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86657 - http://www-01.ibm.com/support/docview.wss?uid=swg21648929
CVE ID: CVE-2013-5370 State: PUBLISHED Published: 2013-10-01T01:00:00 Last Updated: 2024-08-06T17:06:52.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21651299 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM95738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86658
CVE ID: CVE-2013-5371 State: PUBLISHED Published: 2014-01-23T19:00:00 Last Updated: 2024-08-06T17:06:52.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86661 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC92933 - http://www.ibm.com/support/docview.wss?uid=swg21662608
CVE ID: CVE-2013-5372 State: PUBLISHED Published: 2013-10-19T10:00:00 Last Updated: 2024-08-06T17:06:52.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96473 - http://www-01.ibm.com/support/docview.wss?uid=swg21655202 - http://rhn.redhat.com/errata/RHSA-2013-1508.htm
wg1IC96473 - http://www-01.ibm.com/support/docview.wss?uid=swg21655202 - http://rhn.redhat.com/errata/RHSA-2013-1508.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html - http://www-01.ibm.com/support/docview.wss?uid=swg21655201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86662 - https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013 - http://www-01.ibm.com/support/docview.wss?uid=swg21653087 - http://rhn.redhat.com/errata/RHSA-2013-1793.html - http://rhn.redhat.com/errata/RHSA-2013-1509.html - http://rhn.redhat.com/errata/RHSA-2013-1507.html - http://secunia.com/advisories/56338
CVE ID: CVE-2013-5373 State: PUBLISHED Published: 2013-09-25T10:00:00 Last Updated: 2024-08-06T17:06:52.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21648811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86791
CVE ID: CVE-2013-5375 State: PUBLISHED Published: 2013-11-24T18:00:00 Last Updated: 2024-08-06T17:06:52.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV51090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86901 - http://www-01.ibm.com/support/docview.wss?uid=swg21655202 - http://rhn.redhat.com/errata/RHSA-2013-1508.html - http://list
tp://www-01.ibm.com/support/docview.wss?uid=swg21655202 - http://rhn.redhat.com/errata/RHSA-2013-1508.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html - http://www-01.ibm.com/support/docview.wss?uid=swg21655201 - https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013 - http://rhn.redhat.com/errata/RHSA-2013-1793.html - http://rhn.redhat.com/errata/RHSA-2013-1509.html - http://rhn.redhat.com/errata/RHSA-2013-1507.html - http://secunia.com/advisories/56338 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV51089
CVE ID: CVE-2013-5376 State: PUBLISHED Published: 2013-10-17T00:00:00 Last Updated: 2024-08-06T17:06:52.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" attack against an administrative user. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ssg1S1004452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86902
CVE ID: CVE-2013-5378 State: PUBLISHED Published: 2013-11-13T15:00:00 Last Updated: 2024-08-06T17:06:52.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21655634 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM95802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86929 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM97593 - http://www-0
nge.xforce.ibmcloud.com/vulnerabilities/86929 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM97593 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM95881
CVE ID: CVE-2013-5379 State: PUBLISHED Published: 2013-11-13T15:00:00 Last Updated: 2024-08-06T17:06:52.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging improper tagging functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21655635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86930 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM96047
CVE ID: CVE-2013-5380 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T17:06:52.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV33364 - http://secunia.com/advisories/55070 - http://secunia.com/advisories/55068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86931 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085
CVE ID: CVE-2013-5381 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T17:06:52.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86932 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV35394
CVE ID: CVE-2013-5382 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T17:06:52.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than CVE-2013-5383. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86933 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV402
68 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40210
CVE ID: CVE-2013-5383 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T17:06:52.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than CVE-2013-5382. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40704 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/869
8 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86934
CVE ID: CVE-2013-5385 State: PUBLISHED Published: 2014-01-02T11:00:00 Last Updated: 2024-08-06T17:06:52.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation in IBM i 6.1 and 7.1, in z/OS on zSeries servers, and in Networking Operating System (aka NOS, formerly BLADE Operating System) does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www-01
packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=nas8N1010309 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1019716 - http://www.kb.cert.org/vuls/id/229804 - http://www.kb.cert.org/vuls/id/BLUU-985QTG
CVE ID: CVE-2013-5387 State: PUBLISHED Published: 2013-11-06T11:00:00 Last Updated: 2024-08-06T17:06:52.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service (process crash or hang) via a malformed SOAP request with a large amount of request data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87109 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1020072 - http://www.securityfocus.com/bid/63517
CVE ID: CVE-2013-5388 State: PUBLISHED Published: 2013-10-22T22:00:00 Last Updated: 2024-08-06T17:06:52.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK5F. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21653149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87123
CVE ID: CVE-2013-5389 State: PUBLISHED Published: 2013-10-22T22:00:00 Last Updated: 2024-08-06T17:06:52.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK2X. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87125 - http://www-01.ibm.com/support/docview.wss?uid=swg21653149
CVE ID: CVE-2013-5390 State: PUBLISHED Published: 2013-10-16T10:00:00 Last Updated: 2024-08-06T17:06:52.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21652630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87126 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM97439
CVE ID: CVE-2013-5391 State: PUBLISHED Published: 2018-04-27T16:00:00 Last Updated: 2024-08-06T17:06:52.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Worklight Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.x before 6.0.0 Fix Pack 2, and Mobile Foundation Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.0 Fix Pack 2 make it easier for attackers to defeat cryptographic protection mechanisms by leveraging improper initialization of the pseudo random number generator (PRNG) in Android and use of the Java Cryptography Architecture (JCA) by a Worklight program. IBM X-Force ID: 87128. Additional Analyst Notes: - CVE Program Contai
ography Architecture (JCA) by a Worklight program. IBM X-Force ID: 87128. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87128 - http://www-01.ibm.com/support/docview.wss?uid=swg21665731
CVE ID: CVE-2013-5393 State: PUBLISHED Published: 2013-10-16T10:00:00 Last Updated: 2024-08-06T17:06:52.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21652630 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM97439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87153
CVE ID: CVE-2013-5394 State: PUBLISHED Published: 2013-10-16T10:00:00 Last Updated: 2024-08-06T17:06:52.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21652630 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM97439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87154
CVE ID: CVE-2013-5395 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T17:06:52.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87157 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV32526
CVE ID: CVE-2013-5397 State: PUBLISHED Published: 2013-12-18T11:00:00 Last Updated: 2024-08-06T17:06:52.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-5398. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg
5398. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21654471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87293
CVE ID: CVE-2013-5398 State: PUBLISHED Published: 2013-12-18T11:00:00 Last Updated: 2024-08-06T17:06:52.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-5397. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg
5397. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21654471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87294
CVE ID: CVE-2013-5400 State: PUBLISHED Published: 2014-02-14T02:00:00 Last Updated: 2024-08-06T17:06:52.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local environment" access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87296 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1020564
CVE ID: CVE-2013-5401 State: PUBLISHED Published: 2014-03-21T10:00:00 Last Updated: 2024-08-06T17:06:52.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command-port listener in IBM WebSphere MQ Internet Pass-Thru (MQIPT) 2.x before 2.1.0.1 allows remote attackers to cause a denial of service (remote-administration outage) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87297 - http://www-01.ibm.com/support/docview.wss?uid=swg21666863
CVE ID: CVE-2013-5402 State: PUBLISHED Published: 2013-12-18T11:00:00 Last Updated: 2024-08-06T17:06:52.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management, Maximo Asset Management Essentials, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities 7.1.x through 7.1.1.12, 7.1.2, 7.5 before 7.5.0.3 IFIX014, and 7.5.0.5 before IFIX003; SmartCloud Control Desk (SCCD) 7.5 before 7.5.0.3 IFIX014 and 7.5.0.5 before IFIX003; and Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change
.0.5 before IFIX003; and Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.1.x through 7.1.1.12, 7.1.2, and 7.2.x through 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87298 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV49268 - http://www-01.ibm.com/support/docview.wss?uid=swg21660032