Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6709 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:46:22.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029492 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6709 - http://tools.cisco.com/security/center/viewAlert.x?al
co.com/security/center/content/CiscoSecurityNotice/CVE-2013-6709 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32153
CVE ID: CVE-2013-6710 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:46:22.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCul25567. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029492 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32154 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6710
CVE ID: CVE-2013-6711 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:46:22.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=32156 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6711 - http://www.securitytracker.com/id/1029493
CVE ID: CVE-2013-6712 State: PUBLISHED Published: 2013-11-28T02:00:00 Last Updated: 2024-08-06T17:46:22.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2816 - https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322 - https://support.apple.com/HT204659 - http://lists.opensuse.org/opensuse-up
c/doc/public/display?docId=emr_na-c04463322 - https://support.apple.com/HT204659 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=12fe4e90be7bfa2a763197079f68f5568a14e071 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322 - http://www.ubuntu.com/usn/USN-2055-1 - https://bugs.php.net/bug.php?id=66060
CVE ID: CVE-2013-6713 State: PUBLISHED Published: 2014-05-26T19:00:00 Last Updated: 2024-08-06T17:46:22.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.0.2 does not properly check authorization for backup and restore operations, which allows local users to obtain sensitive VM data or cause a denial of service (disk consumption) via unspecified GUI actions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89055 - http://www-01.ibm.com/support/docview.wss?uid=swg21673051
CVE ID: CVE-2013-6714 State: PUBLISHED Published: 2014-05-26T19:00:00 Last Updated: 2024-08-06T17:46:22.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FlashCopy Manager for VMware component in IBM Tivoli Storage FlashCopy Manager 3.1 through 4.1.0.1 does not properly check authorization for backup and restore operations, which allows local users to obtain sensitive VM data or cause a denial of service (data overwrite or disk consumption) via unspecified GUI actions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89057 - http://www-01.ibm.com/support/docview.wss?uid=swg21673045
CVE ID: CVE-2013-6716 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6717 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T17:46:22.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OLAP query engine in IBM DB2 and DB2 Connect 9.7 through FP9, 9.8 through FP5, 10.1 through FP3, and 10.5 through FP2, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial of service (database outage and deactivation) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97738 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97762 - http://www.ibm.com/support/docview.w
w.wss?uid=swg1IC97738 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97762 - http://www.ibm.com/support/docview.wss?uid=swg21659490 - http://www.securityfocus.com/bid/64336 - http://secunia.com/advisories/56451 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC95641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89116 - http://www-01.ibm.com/support/docview.wss?uid=swg21660041 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97737
CVE ID: CVE-2013-6718 State: PUBLISHED Published: 2013-12-01T02:00:00 Last Updated: 2024-08-06T17:46:22.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote attackers to discover account names and passwords via use of an unspecified interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_bladecenter_advanced_management_module_account_information_exposure_cve_2013_6718 - http://secunia.com/advisories/55921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89174 - http://os
2013_6718 - http://secunia.com/advisories/55921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89174 - http://osvdb.org/100397 - http://www.securityfocus.com/bid/64032
CVE ID: CVE-2013-6719 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T17:46:22.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: delivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the testconn_host parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89228 - http://www.exploit-db.com/exploits/32546 - https://tealeaf.support.ibmcloud.com/FileManagement/Download/19eb90ffb8334b398684b4350edc4b7a
CVE ID: CVE-2013-6720 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T17:46:22.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2 allows remote authenticated users to bypass intended access restrictions via a .. (dot dot) in the log parameter, as demonstrated using a crafted request for a customer-support file, as demonstrated by a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32546 - https://tealeaf.support.ibmcloud
otes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32546 - https://tealeaf.support.ibmcloud.com/FileManagement/Download/19eb90ffb8334b398684b4350edc4b7a - https://exchange.xforce.ibmcloud.com/vulnerabilities/89229
CVE ID: CVE-2013-6721 State: PUBLISHED Published: 2013-12-17T11:00:00 Last Updated: 2024-08-06T17:46:22.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.x through 8.0.0.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving widgets. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV51765 - http://secunia.com/advisories/56130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89230 - http://www.securitytracker.com/id/1029498 - http://www-01.ibm.
ps://exchange.xforce.ibmcloud.com/vulnerabilities/89230 - http://www.securitytracker.com/id/1029498 - http://www-01.ibm.com/support/docview.wss?uid=swg21659623
CVE ID: CVE-2013-6722 State: PUBLISHED Published: 2014-02-14T02:00:00 Last Updated: 2024-08-06T17:46:22.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a denial of service or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI07013 - http://www-01.ibm.com/support/docview.wss?uid=swg21662873 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89235
CVE ID: CVE-2013-6723 State: PUBLISHED Published: 2013-12-22T15:00:00 Last Updated: 2024-08-06T17:46:22.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 8.0.0.1 before CF09 does not properly handle references in compute="always" Web Content Manager (WCM) navigator components, which allows remote attackers to obtain sensitive component information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101271 - http://www.securityfocus.com/bid/64488 - http://www-01.ibm.com/support/docview.wss?uid=swg21660011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89278 - http://www-01.ibm.com/support/docview
wss?uid=swg21660011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89278 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI05684
CVE ID: CVE-2013-6724 State: PUBLISHED Published: 2014-02-01T15:00:00 Last Updated: 2024-08-06T17:46:22.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 IF1 allows remote attackers to execute arbitrary code via a crafted ComboList property value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89279 - http://www-01.ibm.com/support/docview.wss?uid=swg21663250
CVE ID: CVE-2013-6725 State: PUBLISHED Published: 2014-01-16T20:00:00 Last Updated: 2024-08-06T17:46:22.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21661323 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM98132 - http://osvdb.org/102119 - https://exchange.xforce.ibmcloud.com/vulnerab
01.ibm.com/support/docview.wss?uid=swg1PM98132 - http://osvdb.org/102119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89280 - http://www-01.ibm.com/support/docview.wss?uid=swg21661325 - http://www.securityfocus.com/bid/65099 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554
CVE ID: CVE-2013-6726 State: PUBLISHED Published: 2014-05-07T10:00:00 Last Updated: 2024-08-06T17:46:22.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebProcess.srv in IBM TRIRIGA Application Platform 3.2.x and 3.3.x before 3.3.1.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89281 - http://www-01.ibm.com/support/docview.wss?uid=swg21671968
CVE ID: CVE-2013-6727 State: PUBLISHED Published: 2014-01-31T02:00:00 Last Updated: 2024-08-06T17:46:22.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21662725 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89282
CVE ID: CVE-2013-6728 State: PUBLISHED Published: 2014-02-14T02:00:00 Last Updated: 2024-08-06T17:46:22.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: The charting component in IBM WebSphere Dashboard Framework (WDF) 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21663022 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO78265 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO78266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89283
CVE ID: CVE-2013-6729 State: PUBLISHED Published: 2014-03-21T10:00:00 Last Updated: 2024-08-06T17:46:22.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM QuickFile 1.0.0.0 before iFix 4 and 1.1.0.1 before iFix 3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89284 - http://www-01.ibm.com/support/docview.wss?uid=swg21667388 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC98112 - http://www.securityfocus.com/bid/66246
CVE ID: CVE-2013-6730 State: PUBLISHED Published: 2014-03-04T22:00:00 Last Updated: 2024-08-06T17:46:22.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF10, when the wcm.path.traversal.security setting is enabled, allows remote attackers to bypass intended read restrictions on an item by accessing that item within search results. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI07185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89363 - http://www-01.ibm.com/suppor
/docview.wss?uid=swg1PI07185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89363 - http://www-01.ibm.com/support/docview.wss?uid=swg21665915
CVE ID: CVE-2013-6731 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T17:46:22.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Netezza Performance Portal 2.x before 2.0.0.3 allows remote authenticated users to change arbitrary passwords via an HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21663353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89393
CVE ID: CVE-2013-6732 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T17:46:22.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89394 - http://www-01.ibm.com/support/docview.wss?uid=swg21662856
CVE ID: CVE-2013-6733 State: PUBLISHED Published: 2013-12-17T11:00:00 Last Updated: 2024-08-06T17:46:22.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21659419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89396
CVE ID: CVE-2013-6734 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T17:46:22.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, which allows remote authenticated users to obtain sensitive information in opportunistic circumstances by leveraging access to the same web container. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI06341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89397 - http://www-01.ibm.com/support/docview.wss?uid=swg21664641
CVE ID: CVE-2013-6735 State: PUBLISHED Published: 2013-12-22T15:00:00 Last Updated: 2024-08-06T17:46:22.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a modified Web Content Manager (WCM) URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56161 - http://www.securityfocus.com/archive/1/530552/100/0/threaded - http://www.securityfocus.com/bid/64496 -
visories/56161 - http://www.securityfocus.com/archive/1/530552/100/0/threaded - http://www.securityfocus.com/bid/64496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89591 - http://osvdb.org/101255 - http://www-01.ibm.com/support/docview.wss?uid=swg21660289 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI07777 - https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_fix_available_for_unauthorized_information_retrieval_security_vulnerability_in_ibm_websphere_portal_cve_2013_6735 - http://www.securitytracker.com/id/1029539 - http://packetstormsecurity.com/files/124611/IBM-Web-Content-Manager-XPath-Injection.html
CVE ID: CVE-2013-6737 State: PUBLISHED Published: 2014-06-21T15:00:00 Last Updated: 2024-08-06T17:46:22.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encountering a 1691 hardware fault, which allows remote authenticated users to obtain sensitive customer-data fragments by reading this file after it is copied. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89782 - http://www.securityfocus.com/bid/68133 - http://www.ibm.com/support/docview.wss?uid=ssg1S1004676
CVE ID: CVE-2013-6738 State: PUBLISHED Published: 2014-04-24T10:00:00 Last Updated: 2024-08-06T17:46:22.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an invalid query parameter in a response from an OAuth authorization endpoint. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89854 - http://www-01.ibm.com/support/docview.wss?uid=swg21669137 - http://www-01.
e.xforce.ibmcloud.com/vulnerabilities/89854 - http://www-01.ibm.com/support/docview.wss?uid=swg21669137 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV57425 - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://www.securityfocus.com/bid/67051 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554
CVE ID: CVE-2013-6739 State: PUBLISHED Published: 2018-04-27T16:00:00 Last Updated: 2024-08-06T17:46:22.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89855 - http://www-01.ibm.com/support/docview.wss?uid=swg21663960
CVE ID: CVE-2013-6741 State: PUBLISHED Published: 2014-05-26T16:00:00 Last Updated: 2024-08-06T17:46:22.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837 allow remote authenticated users to obtain potentially sensitive stack-trace information by triggering a Birt error. Additional Analyst Notes: - CVE Program Container: Refe
ly sensitive stack-trace information by triggering a Birt error. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89857 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV50316
CVE ID: CVE-2013-6742 State: PUBLISHED Published: 2014-02-13T22:00:00 Last Updated: 2024-08-06T17:46:23.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21662928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89858
CVE ID: CVE-2013-6743 State: PUBLISHED Published: 2014-02-13T22:00:00 Last Updated: 2024-08-06T17:46:23.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IMG element. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21662928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89859 - http://osvdb.org/103131