Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9958 State: PUBLISHED Published: 2017-04-12T20:00:00 Last Updated: 2024-08-06T03:07:31.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL/ - http://www.securityfocus.com/bid/95305 - http://www.openwall.com/lists/oss-security/2016/12/15/11 - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising
://www.openwall.com/lists/oss-security/2016/12/15/11 - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html - https://security.gentoo.org/glsa/201707-02 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S/ - https://bitbucket.org/mpyne/game-music-emu/wiki/Home - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/ - http://lists.opensuse.org/opensuse-security-announce/201
s.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/ - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html
CVE ID: CVE-2016-9959 State: PUBLISHED Published: 2017-04-12T20:00:00 Last Updated: 2024-08-06T03:07:31.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL/ - http://www.securityfocus.com/bid/95305 - http://www.openwall.com/lists/oss-security/2016/12/15/11 - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising
CVE ID: CVE-2016-9960 State: PUBLISHED Published: 2017-06-06T18:00:00 Last Updated: 2024-08-06T03:07:31.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash). Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL/ - http://www.securityfocus.com/bid/95305 - http://www.openwall.com/lists/oss-security/2016/12/15/11 - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html - https://security.gentoo.org/glsa
tps://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html - https://security.gentoo.org/glsa/201707-02 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S/ - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html - https://bitbucket.org/mpyne/game-music-emu/wiki/Home - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME/ - https://bugzilla.redhat.com/show_bug.cgi?id=1405423 - https://lists.fedoraproject.org/archiv
7AVB2EXC463FUYN6C6FABHME/ - https://bugzilla.redhat.com/show_bug.cgi?id=1405423 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/
CVE ID: CVE-2016-9961 State: PUBLISHED Published: 2017-06-06T18:00:00 Last Updated: 2024-08-06T03:07:31.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: game-music-emu before 0.6.1 mishandles unspecified integer values. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL/ - http://www.securityfocus.com/bid/95305 - http://www.openwall.com/lists/oss-security/2016/12/15/11 - https://security.gentoo.org/glsa/201707-02 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5
tps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S/ - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html - https://bitbucket.org/mpyne/game-music-emu/wiki/Home - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME/ - https://bugzilla.redhat.com/show_bug.cgi?id=1405423 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/ - https://scarybeastsecurity.blogspot.cz/2
-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/ - https://scarybeastsecurity.blogspot.cz/2016/12/redux-compromising-linux-using-snes.html
CVE ID: CVE-2016-9962 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T03:07:31.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95361 - https://github.com/docker/docker/releases/tag/v
rogram Container: References: - http://www.securityfocus.com/bid/95361 - https://github.com/docker/docker/releases/tag/v1.12.6 - http://rhn.redhat.com/errata/RHSA-2017-0116.html - http://seclists.org/fulldisclosure/2017/Jan/29 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WUQ3MQNEL5IBZZLMLR72Q4YDCL2SCKRK/ - https://bugzilla.suse.com/show_bug.cgi?id=1012568#c6 - https://security.gentoo.org/glsa/201701-34 - http://rhn.redhat.com/errata/RHSA-2017-0123.html - https://github.com/opencontainers/runc/commit/50a19c6ff828c58e5dab13830bd3dacde268afe5 - http://rhn.redhat.com/errata/RHSA-2017-0127.html - https://lists.fedoraproject.org/archives/list/p
3830bd3dacde268afe5 - http://rhn.redhat.com/errata/RHSA-2017-0127.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FINGBFMIXBG6B6ZWYH3TMRP5V3PDBNXR/ - https://access.redhat.com/security/vulnerabilities/cve-2016-9962 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAXJMMLRU7DD2IMG47SR2K4BOFFG7FZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UVM7FCOQMPKOFLDTUYSS4ES76DDM56VP/ - http://www.securityfocus.com/archive/1/540001/100/0/threaded - http://seclists.org/fulldisclosure/2017/Jan/21
CVE ID: CVE-2016-9963 State: PUBLISHED Published: 2017-02-01T15:00:00 Last Updated: 2024-08-06T03:07:31.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3747 - http://www.exim.org/static/doc/CVE-2016-9963.txt - http://www.ubuntu.com/usn/USN-3164-1 - https://bugs.exim.org/show_bug.cgi?id=1996 - http://www.securitytracker.com/id/1037484 - http://www.securityfocus.com/bid/94947
CVE ID: CVE-2016-9964 State: PUBLISHED Published: 2016-12-16T09:02:00 Last Updated: 2024-08-06T03:07:31.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bottlepy/bottle/issues/913 - https://github.com/bottlepy/bottle/commit/6d7e13da0f998820800ecb3fe9ccee4189aefb54 - http://www.debian.org/security/2016/dsa-3743 - http://www.securityfocus.com/bid/94961
CVE ID: CVE-2016-9965 State: PUBLISHED Published: 2016-12-16T09:02:00 Last Updated: 2024-08-06T03:07:31.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7119. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94955 - http://security.samsungmobile.com/smrupdate.html#SMR-DEC-2016
CVE ID: CVE-2016-9966 State: PUBLISHED Published: 2016-12-16T09:02:00 Last Updated: 2024-08-06T03:07:31.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7120. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94955 - http://security.samsungmobile.com/smrupdate.html#SMR-DEC-2016
CVE ID: CVE-2016-9967 State: PUBLISHED Published: 2016-12-16T09:02:00 Last Updated: 2024-08-06T03:07:31.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7121. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94955 - http://security.samsungmobile.com/smrupdate.html#SMR-DEC-2016
CVE ID: CVE-2016-9969 State: PUBLISHED Published: 2019-05-23T17:37:54 Last Updated: 2024-08-06T03:07:31.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libwebp 0.5.1, there is a double free bug in libwebpmux. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/webp/issues/detail?id=322
CVE ID: CVE-2016-9972 State: PUBLISHED Published: 2017-06-27T16:00:00 Last Updated: 2024-08-06T03:07:31.321Z Vendors: IBM Products: Security QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 120208. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120208 - http://www.securityf
support/docview.wss?uid=swg22004925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120208 - http://www.securityfocus.com/bid/99268
CVE ID: CVE-2016-9973 State: PUBLISHED Published: 2017-06-13T19:00:00 Last Updated: 2024-08-06T03:07:31.584Z Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120209. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120209 - http://www.sec
m.com/support/docview.wss?uid=swg22004534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120209 - http://www.securityfocus.com/bid/99060
CVE ID: CVE-2016-9975 State: PUBLISHED Published: 2017-02-24T18:00:00 Last Updated: 2024-08-06T03:07:31.490Z Vendors: IBM Corporation Products: Jazz for Service Management Problem Types: Gain Access Description: IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 1998714. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21998714 - http://www.securityfocus.com/bid/96444
CVE ID: CVE-2016-9976 State: PUBLISHED Published: 2017-05-03T17:00:00 Last Updated: 2024-08-06T03:07:31.851Z Vendors: IBM Corporation Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL request, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 120252. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22002018 - http://www.securityfocus.com/bid/98305
CVE ID: CVE-2016-9977 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-06T03:07:31.819Z Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 120253. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/120253 - http://www.securityfocus.com/bid/98786 - http://www.ibm.com/support/docview.wss?uid=swg2200398
/vulnerabilities/120253 - http://www.securityfocus.com/bid/98786 - http://www.ibm.com/support/docview.wss?uid=swg22003981
CVE ID: CVE-2016-9978 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-06T03:07:31.385Z Vendors: IBM Products: Curam Social Program Management Problem Types: Obtain Information Description: IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to disclose sensitive information. IBM X-Force ID: 120254. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22001782 - http://www.securityfocus.com/bid/97990
CVE ID: CVE-2016-9979 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-06T03:07:31.640Z Vendors: IBM Products: Curam Social Program Management Problem Types: Cross-Site Scripting Description: IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120255. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97993 - http://www.ibm.com/support/docview.wss?uid=swg22001780
CVE ID: CVE-2016-9980 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-06T03:07:31.398Z Vendors: IBM Products: Curam Social Program Management Problem Types: Cross-Site Scripting Description: IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120256. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98005 - http://www.ibm.com/support/docview.wss?uid=swg22001779
CVE ID: CVE-2016-9981 State: PUBLISHED Published: 2017-08-02T17:00:00Z Last Updated: 2024-09-17T00:20:31.510Z Vendors: IBM Products: Security AppScan Enterprise Problem Types: Gain Access Description: IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session. IBM X-Force ID: 120257 Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120257 - http://www.ibm.com/support/docview.wss?uid=swg22006430
CVE ID: CVE-2016-9982 State: PUBLISHED Published: 2017-06-22T18:00:00 Last Updated: 2024-08-06T03:07:31.374Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99197 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120274 - http://www.ibm.com/support/docview.wss?uid=swg22004273
CVE ID: CVE-2016-9983 State: PUBLISHED Published: 2017-06-22T18:00:00 Last Updated: 2024-08-06T03:07:31.401Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120275 - http://www.ibm.com/support/docview.wss?uid=swg22004273
CVE ID: CVE-2016-9984 State: PUBLISHED Published: 2017-06-13T19:00:00 Last Updated: 2024-08-06T03:07:31.583Z Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Privileges Description: IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on the system as administrator. IBM X-Force ID: 120276. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/120276 - http://www.ibm.com/support/docview.wss?uid=swg21998608
CVE ID: CVE-2016-9985 State: PUBLISHED Published: 2017-03-08T19:00:00 Last Updated: 2024-08-06T03:07:31.598Z Vendors: IBM Corporation Products: Cognos Business Intelligence Problem Types: Obtain Information Description: IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. IBM Reference #: 1999671. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96962 - http://www.ibm.com/support/docview.wss?uid=swg21999671
CVE ID: CVE-2016-9986 State: PUBLISHED Published: 2017-07-05T18:00:00Z Last Updated: 2024-09-16T23:31:11.332Z Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120552. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/120552 - http://www.securityfocus.com/bid/99353 - http://www.ibm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/120552 - http://www.securityfocus.com/bid/99353 - http://www.ibm.com/support/docview.wss?uid=swg22001007
CVE ID: CVE-2016-9987 State: PUBLISHED Published: 2017-07-05T18:00:00Z Last Updated: 2024-09-17T00:27:00.608Z Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120553. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/120553 - http://www.securityfocus.com/bid/99353 - http://www.ibm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/120553 - http://www.securityfocus.com/bid/99353 - http://www.ibm.com/support/docview.wss?uid=swg22001007
CVE ID: CVE-2016-9988 State: PUBLISHED Published: 2017-07-05T18:00:00Z Last Updated: 2024-09-17T02:15:56.166Z Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120554. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/120554 - http://www.securityfocus.com/bid/99353 - http://www.ibm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/120554 - http://www.securityfocus.com/bid/99353 - http://www.ibm.com/support/docview.wss?uid=swg22001007
CVE ID: CVE-2016-9989 State: PUBLISHED Published: 2017-07-05T18:00:00Z Last Updated: 2024-09-17T02:26:41.581Z Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120555. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120555 - http://www.ibm
- http://www.securityfocus.com/bid/99353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120555 - http://www.ibm.com/support/docview.wss?uid=swg22001007
CVE ID: CVE-2016-9990 State: PUBLISHED Published: 2017-03-31T18:00:00 Last Updated: 2024-08-06T03:07:31.409Z Vendors: IBM Corporation Products: iNotes Problem Types: Cross-Site Scripting Description: IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998824. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038145 - http://www.ibm.com/support/docview.wss?uid=swg21998824 - http://www.securityfocus.com/bid/97151
CVE ID: CVE-2016-9991 State: PUBLISHED Published: 2017-06-08T21:00:00 Last Updated: 2024-08-06T03:07:31.857Z Vendors: IBM Products: Sterling Order Management Problem Types: Gain Access Description: IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 121314. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121314 - http://www-01.ibm.com/support/docview.wss?uid=swg21998167