Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5870 State: PUBLISHED Published: 2017-04-04T18:00:00 Last Updated: 2024-08-06T01:15:10.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msm_ipc_router_close function in net/ipc_router/ipc_router_socket.c in the ipc_router component for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact by triggering failure of an accept system call for an AF_MSM_IPC socket. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/null-pointer-dereference
et. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/null-pointer-dereference-when-processing-accept-system-call-user-process-afmsmipc-sockets-cve-2016 - http://www.securityfocus.com/bid/97414 - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=71fe5361cbef34e2d606b79e8936a910a3e95566
CVE ID: CVE-2016-5871 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T17:04:08.260Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Integer Overflow to Buffer Overflow in UEFI Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an image file. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2016-5872 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T20:11:43.063Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Input Validation in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2016-5873 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:15:09.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HTTP URL parsing functions in pecl_http before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/29/1 - http://www.securityfocus.com/bid/95863 - http://www.openwall.com/lists/oss-security/2016/06/29/4 - https://security.netapp.com/advisory/ntap-20180112-0001/ - https://security.gentoo.org/glsa/201612-17 - https://github.com/m6w6/ext-http/com
app.com/advisory/ntap-20180112-0001/ - https://security.gentoo.org/glsa/201612-17 - https://github.com/m6w6/ext-http/commit/3724cd76a28be1d6049b5537232e97ac - https://bugs.php.net/bug.php?id=71719 - https://pecl.php.net/package/pecl_http/3.0.1
CVE ID: CVE-2016-5874 State: PUBLISHED Published: 2016-07-22T15:00:00 Last Updated: 2024-08-06T01:15:10.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service (OPC UA service outage) via crafted TCP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92110 - https://ics-cert.us-cert.gov/advisories/ICSA-16-208-02 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-453276.pdf
CVE ID: CVE-2016-5875 State: REJECTED Published: 2018-03-12T02:00:00 Last Updated: 2018-03-12T01:57:01 Description: No description available.
CVE ID: CVE-2016-5876 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:15:09.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud server before 8.2.6 and 9.x before 9.0.3, when the gallery app is enabled, allows remote attackers to download arbitrary images via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95861 - https://owncloud.org/security/advisory/?id=oc-sa-2016-010
CVE ID: CVE-2016-5878 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-06T01:15:09.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92279 - http://www-01.ibm.com/support/docview.wss?uid=swg21987721
CVE ID: CVE-2016-5879 State: PUBLISHED Published: 2016-09-02T14:00:00 Last Updated: 2024-08-06T01:15:10.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted (1) Disaster Recovery or (2) High Availability command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92538 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT16174 - http://www-01.ibm.com/support/docview.wss?uid=swg21987697
CVE ID: CVE-2016-5880 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.023Z Vendors: IBM Corporation Products: Domino Problem Types: Cross-Site Scripting Description: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94606 - http://www.securitytracker.com/id/1037383 - http://www.ibm.com/support/docview.wss?uid=swg21992835
CVE ID: CVE-2016-5881 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T01:15:09.894Z Vendors: IBM Corporation Products: iNotes Problem Types: Cross-Site Scripting Description: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037592 - http://www.ibm.com/support/docview.wss?uid=swg21995122 - http://www.securityfocus.com/bid/95459
CVE ID: CVE-2016-5882 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.727Z Vendors: IBM Corporation Products: Domino Problem Types: Cross-Site Scripting Description: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94604 - http://www.securitytracker.com/id/1037383 - http://www.ibm.com/support/docview.wss?uid=swg21992835
CVE ID: CVE-2016-5883 State: PUBLISHED Published: 2017-02-23T16:00:00 Last Updated: 2024-08-06T01:15:09.823Z Vendors: IBM Corporation Products: iNotes Problem Types: Cross-Site Scripting Description: IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1997010. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96168 - http://www.securitytracker.com/id/1037790 - http://www.ibm.com/support/docview.wss?uid=swg21997010
CVE ID: CVE-2016-5884 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.233Z Vendors: n/a Products: IBM Domino 8.5.3.5, 8.5.3.6, 9.0.1, 8.5, 9.0, 8.5.1, 8.5.2, 8.5.3, 9.0.1.1, 8.0.2, 8.0, 8.0.1, 8.5.1.5, 8.5.2.4, 9.0.1.2, 8.5.0.1, 9.0.1.3, 8.5.1.4, 9.0.1.4, 9.0.1.5, 8.5.1.1, 9.0.1.6, 9.0.1.7 Problem Types: Cross-Site Scripting Description: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94602 - http://www.securitytracker.com/id/1037383 - http://www.ibm.com/support/docview.wss?uid=swg21992835
CVE ID: CVE-2016-5888 State: PUBLISHED Published: 2017-05-10T14:00:00 Last Updated: 2024-08-06T01:15:10.075Z Vendors: IBM Corporation Products: Interact Problem Types: Cross-Site Scripting Description: IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 115084. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22002147
CVE ID: CVE-2016-5889 State: PUBLISHED Published: 2017-05-10T14:00:00 Last Updated: 2024-08-06T01:15:09.830Z Vendors: IBM Corporation Products: Interact Problem Types: Gain Access Description: IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 115085. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22002149
CVE ID: CVE-2016-5890 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-06T01:15:10.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote authenticated users to change arbitrary passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT16043 - http://www.securityfocus.com/bid/94391 - http://www-01.ibm.com/support/docview.wss?uid=swg21989577
CVE ID: CVE-2016-5892 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T01:15:10.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM 10x, as used in Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications before 1.0.0.5_2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93277 - http://www-01.ibm.com/support/docview.wss?uid=swg21991148
CVE ID: CVE-2016-5893 State: PUBLISHED Published: 2017-06-23T16:00:00 Last Updated: 2024-08-06T01:15:10.781Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 115336. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004272 - https://exchange.xforce.ibmcloud.com/vulnerabilities/115336 - http://www.securityfocus.com/bid/99228
CVE ID: CVE-2016-5894 State: PUBLISHED Published: 2017-03-08T19:00:00 Last Updated: 2024-08-06T01:15:10.793Z Vendors: IBM Corporation Products: WebSphere Commerce Enterprise Problem Types: Obtain Information Description: IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local user could view a plain text password in a Unix console. IBM Reference #: 1997408. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997408 - http://www.securitytracker.com/id/1037962 - http://www.securityfocus.com/bid/96624
CVE ID: CVE-2016-5896 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.790Z Vendors: IBM Corporation Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21987855 - http://www.securityfocus.com/bid/93872
CVE ID: CVE-2016-5897 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.809Z Vendors: IBM Corporation Products: Jazz Reporting Service Problem Types: Gain Access Description: IBM Jazz Reporting Service (JRS) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21991153 - http://www.securityfocus.com/bid/94857
CVE ID: CVE-2016-5898 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.015Z Vendors: IBM Corporation Products: Jazz Reporting Service Problem Types: Obtain Information Description: IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21991154 - http://www.securityfocus.com/bid/94848
CVE ID: CVE-2016-5899 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.015Z Vendors: IBM Corporation Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21991154 - http://www.securityfocus.com/bid/94844
CVE ID: CVE-2016-5900 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-06T01:15:10.758Z Vendors: IBM Corporation Products: Tealeaf Customer Experience Problem Types: Obtain Information Description: IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the TLS certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21994534
CVE ID: CVE-2016-5901 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T01:15:10.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a test page in IBM Business Process Manager Advanced 8.5.6.0 through 8.5.7.0 before cumulative fix 2016.09 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990852 - http://www.securityfocus.com/bid/93353 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR56391
CVE ID: CVE-2016-5902 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-06T01:15:10.043Z Vendors: IBM Corporation Products: IBM Maximo Asset Management 6.2, 7.1, 7.5, 7.5.0.0, 7.5.0.10, 7.1.0.0, 6.2.0.0, 7.2, 7.1.1, 7.1.2, 7.2.1, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 7.1.1.1, 7.1.1.10, 7.1.1.11, 7.1.1.12, 7.1.1.2, 7.1.1.5, 7.1.1.6, 7.1.1.7, 7.1.1.8, 7.1.1.9, 7.5.0.1, 7.5.0.2, 7.5.0.3, 7.5.0.4, 7.5.0.5, 7.6, 7.5.0, 7.6.0 Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality
is vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21988252 - http://www.securityfocus.com/bid/92535
CVE ID: CVE-2016-5905 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-06T01:15:09.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93871 - http://www-01.ibm.com/support/docview.wss?uid=swg21988253
CVE ID: CVE-2016-5918 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-06T01:15:10.735Z Vendors: IBM Corporation Products: Tivoli Storage Manager HSM for Windows Problem Types: Obtain Information Description: IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt and the password is changed. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21988728 - http://www.securityfocus.com/bid/92534
CVE ID: CVE-2016-5919 State: PUBLISHED Published: 2017-02-16T20:00:00 Last Updated: 2024-08-06T01:15:10.197Z Vendors: IBM Corporation Products: Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM Reference #: 1996868. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037855 - http://www.ibm.com/support/docview.wss?uid=swg21996868
CVE ID: CVE-2016-5920 State: PUBLISHED Published: 2016-10-29T01:00:00 Last Updated: 2024-08-06T01:15:10.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21989060 - http://www.securityfocus.com/bid/92634 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI67537
CVE ID: CVE-2016-5927 State: PUBLISHED Published: 2016-09-12T10:00:00 Last Updated: 2024-08-06T01:15:10.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92723 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT15203 - http://www-01.ibm.com/support/docview.wss?uid=swg21989006
CVE ID: CVE-2016-5932 State: PUBLISHED Published: 2017-03-01T21:00:00 Last Updated: 2024-08-06T01:15:10.786Z Vendors: IBM Corporation Products: Connections Problem Types: Cross-Site Scripting Description: IBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998294. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96453 - http://www.ibm.com/support/docview.wss?uid=swg21998294
CVE ID: CVE-2016-5933 State: PUBLISHED Published: 2017-03-08T19:00:00 Last Updated: 2024-08-06T01:15:09.988Z Vendors: IBM Corporation Products: Tivoli Monitoring V6 Problem Types: Gain Access Description: IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference #: 1997223. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997223
CVE ID: CVE-2016-5934 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-06T01:15:10.134Z Vendors: IBM Corporation Products: Tivoli Storage Manager FastBack Problem Types: Gain Access Description: IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. By placing a specially-crafted DLL in the victim's path, an attacker could exploit this vulnerability when the installer is executed to run arbitrary code on the system with privileges of the victim. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92614 - http://www.ibm.com/support/docview.wss?uid=swg21988908
CVE ID: CVE-2016-5935 State: PUBLISHED Published: 2017-02-02T22:00:00 Last Updated: 2024-08-06T01:15:10.036Z Vendors: IBM Corporation Products: Tivoli Components Problem Types: Obtain Information Description: IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96003 - http://www.ibm.com/support/docview.wss?uid=swg21997711
CVE ID: CVE-2016-5937 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.624Z Vendors: IBM Corporation Products: Kenexa LCMS Premier on Cloud Problem Types: Gain Access Description: IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992067 - http://www.securityfocus.com/bid/94390
CVE ID: CVE-2016-5938 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T01:15:10.617Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Obtain Information Description: IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992072 - http://www.securityfocus.com/bid/95428
CVE ID: CVE-2016-5939 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.621Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Data Manipulation Description: IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992129 - http://www.securityfocus.com/bid/93523