Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-0271 State: PUBLISHED Published: 2016-07-08T01:00:00 Last Updated: 2024-08-05T22:15:23.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150
CVE ID: CVE-2016-0272 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T22:15:23.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors. IBM X-Force ID: 111052. Additional
te attackers to hijack the authentication of arbitrary users via unspecified vectors. IBM X-Force ID: 111052. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21977245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111052
CVE ID: CVE-2016-0273 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-05T22:15:23.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 befo
nd 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg219914
Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991478 - http://www.securityfocus.com/bid/94557
CVE ID: CVE-2016-0274 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T22:15:23.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to conduct clickjacking attacks via a crafted web site. IBM X-Force ID: 111076. Additional Analyst Notes: - CVE Program Container: References: - https://excha
crafted web site. IBM X-Force ID: 111076. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/111076 - http://www-01.ibm.com/support/docview.wss?uid=swg21977245
CVE ID: CVE-2016-0275 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T22:15:23.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows local users to obtain sensitive information via vectors related to cacheable HTTPS responses. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ib
related to cacheable HTTPS responses. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21977245
CVE ID: CVE-2016-0276 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T22:15:23.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object. IBM X-Force ID: 111084. Additional Analyst Notes: - CVE Pr
d serialized Java Message Service (JMS) ObjectMessage object. IBM X-Force ID: 111084. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21977245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111084
CVE ID: CVE-2016-0277 State: PUBLISHED Published: 2016-06-26T14:00:00 Last Updated: 2024-08-05T22:15:23.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0278, CVE-2016-0279, and CVE-2016-0301. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036091 - http://www-01.ibm.com/support/docview.wss?uid=swg21983292
CVE ID: CVE-2016-0278 State: PUBLISHED Published: 2016-06-26T14:00:00 Last Updated: 2024-08-05T22:15:23.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0279, and CVE-2016-0301. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036091 - http://www.talosintelligence.com/reports/TALOS-2016-0090/ - http://www-01.ibm.com/support/docview.wss?uid=swg21983292
CVE ID: CVE-2016-0279 State: PUBLISHED Published: 2016-06-26T14:00:00 Last Updated: 2024-08-05T22:15:23.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0278, and CVE-2016-0301. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036091 - http://www-01.ibm.com/support/docview.wss?uid=swg21983292
CVE ID: CVE-2016-0280 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T22:15:23.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server Framework and InfoSphere Information Server Business Glossary 9.1 before 9.1.2.0, Information Server Framework and InfoSphere Information Governance Catalog 11.3 before 11.3.1.2, and Information Server Framework and InfoSphere Information Governance Catalog 11.5 before 11.5.0.1 allows remote authenticated users to inject arbitrary w
d InfoSphere Information Governance Catalog 11.5 before 11.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036418 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR55452 - http://www-01.ibm.com/support/docview.wss?uid=swg21981766 - http://www.securityfocus.com/bid/92133
CVE ID: CVE-2016-0281 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T22:15:23.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, allows remote attackers to cause a denial of service (FC1763 or FC5899 adapter crash) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036481 - http://www.securityfocus.com/bid/92193 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV84184 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV82421 - http://www-01.ibm.com/support/docview.w
ss?uid=swg1IV84184 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV82421 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV81459 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV80569 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV81357 - http://aix.software.ibm.com/aix/efixes/security/mustendd_advisory.asc
CVE ID: CVE-2016-0282 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-05T22:15:23.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991722 - http://www.securitytracker.com/id/1037383 - http://www.securityfocus.com/bid/94558
CVE ID: CVE-2016-0283 State: PUBLISHED Published: 2016-03-19T15:00:00 Last Updated: 2024-08-05T22:15:23.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM WebSphere Application Server (WAS) Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI58003 - http://www.securitytracker.com/id/1035330 - http://www-01.ibm.com/support/docview.wss?uid=swg21978293
CVE ID: CVE-2016-0284 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-05T22:15:23.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational E
Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. A
an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991478 - http://www.securityfocus.com/bid/94555
CVE ID: CVE-2016-0285 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-05T22:15:23.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 befo
nd 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted field. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg2199
. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991478 - http://www.securityfocus.com/bid/94550
CVE ID: CVE-2016-0286 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T22:15:23.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote authenticated users to obtain administrator passwords by leveraging unspecified privileges. BM X-Force ID: 111234. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/111234 - http://www-01.ibm.com/support/docview.wss?uid=swg21986852
CVE ID: CVE-2016-0287 State: PUBLISHED Published: 2016-07-08T01:00:00 Last Updated: 2024-08-05T22:15:23.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91706 - http://www-01.ibm.com/support/docview.wss?uid=nas8N1021418 - http://www-01.ibm.com/support/docview.wss?uid=swg1SI60523 - https://www.tenable.com/security/research/tra-2016-18
CVE ID: CVE-2016-0288 State: PUBLISHED Published: 2016-06-01T15:00:00 Last Updated: 2024-08-05T22:15:23.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Standard 8.7.x, 8.8.x, and 9.x before 9.0.3.2 and Security AppScan Enterprise allow remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035927 - http://www-01.ibm.com/support/docview.wss?uid=swg21980055
CVE ID: CVE-2016-0289 State: PUBLISHED Published: 2016-04-04T14:00:00 Last Updated: 2024-08-05T22:15:23.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21979519
CVE ID: CVE-2016-0291 State: PUBLISHED Published: 2018-02-28T17:00:00 Last Updated: 2024-08-05T22:15:23.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111302
CVE ID: CVE-2016-0292 State: PUBLISHED Published: 2016-08-30T17:00:00 Last Updated: 2024-08-05T22:15:23.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985907
CVE ID: CVE-2016-0293 State: PUBLISHED Published: 2016-09-01T01:00:00 Last Updated: 2024-08-05T22:15:23.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985743 - http://www.securityfocus.com/bid/92593
CVE ID: CVE-2016-0295 State: PUBLISHED Published: 2018-02-28T17:00:00 Last Updated: 2024-08-05T22:15:23.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111363. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111363
CVE ID: CVE-2016-0296 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T22:15:23.146Z Vendors: IBM Corporation Products: BigFix Platform Problem Types: Obtain Information Description: IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive information in log files that could be available to a local user. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21993213 - http://www.securityfocus.com/bid/94213
CVE ID: CVE-2016-0297 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T22:15:23.308Z Vendors: IBM Corporation Products: BigFix Platform Problem Types: Obtain Information Description: IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) could allow a remote attacker to obtain sensitive information due to a missing HTTP Strict-Transport-Security Header through man in the middle techniques. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94188 - http://www.ibm.com/support/docview.wss?uid=swg21993214
CVE ID: CVE-2016-0298 State: PUBLISHED Published: 2016-06-29T01:00:00 Last Updated: 2024-08-05T22:15:23.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981749
CVE ID: CVE-2016-0299 State: PUBLISHED Published: 2018-02-28T17:00:00 Last Updated: 2024-08-05T22:15:23.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to obtain sensitive information via vectors involving a database query. IBM X-Force ID: 111382. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111382
CVE ID: CVE-2016-0300 State: PUBLISHED Published: 2018-02-02T21:00:00 Last Updated: 2024-08-05T22:15:23.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/111412 - http://www-01.ibm.com/support/docview.wss?uid=swg21979760
CVE ID: CVE-2016-0301 State: PUBLISHED Published: 2016-06-26T14:00:00 Last Updated: 2024-08-05T22:15:23.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0278, and CVE-2016-0279. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036091 - http://www-01.ibm.com/support/docview.wss?uid=swg21983292
CVE ID: CVE-2016-0303 State: PUBLISHED Published: 2018-02-02T21:00:00 Last Updated: 2024-08-05T22:15:23.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Integrated Portal 2.2.0.0 through 2.2.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981591
CVE ID: CVE-2016-0304 State: PUBLISHED Published: 2016-06-29T01:00:00 Last Updated: 2024-08-05T22:15:23.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983328
CVE ID: CVE-2016-0305 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-05T22:15:23.310Z Vendors: IBM Corporation Products: Connections Problem Types: Cross-Site Scripting Description: IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm
cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21986770 - http://www.securityfocus.com/bid/92436