Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0880 State: PUBLISHED Published: 2014-03-29T01:00:00 Last Updated: 2024-08-06T09:27:20.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrative IP address. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91145 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004570
CVE ID: CVE-2014-0881 State: PUBLISHED Published: 2018-04-25T20:00:00 Last Updated: 2024-08-06T09:27:20.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/ht114524 - https://www.ibm.com/blogs/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configu
/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configured-correctly-cve-2014-0881/ - https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094725
CVE ID: CVE-2014-0882 State: PUBLISHED Published: 2018-04-25T20:00:00 Last Updated: 2024-08-06T09:27:20.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data (FFDC). IBM X-Force ID: 91149. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/ht114525 - https://www.ibm.com/blogs/psirt/security-bulletin-account-specific-information-likely-to-be-present-in-service-advisor-data-ffdc-on-th
m.com/blogs/psirt/security-bulletin-account-specific-information-likely-to-be-present-in-service-advisor-data-ffdc-on-the-integrated-management-module-ii-imm2-cve-2014-0882/ - https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094726
CVE ID: CVE-2014-0883 State: PUBLISHED Published: 2018-04-20T21:00:00 Last Updated: 2024-08-06T09:27:20.087Z Severity: N/A (CVSS 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N) Vendors: IBM Products: Power HMC Problem Types: CWE-79 Description: IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 91163. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/security-bulletin-power-hardware-management-console-hmc-cve-2014-0883 -
References: - https://www.ibm.com/support/pages/security-bulletin-power-hardware-management-console-hmc-cve-2014-0883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91163
CVE ID: CVE-2014-0884 State: PUBLISHED Published: 2014-03-25T20:00:00 Last Updated: 2024-08-06T09:27:20.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21668124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91170
CVE ID: CVE-2014-0885 State: PUBLISHED Published: 2014-03-25T20:00:00 Last Updated: 2024-08-06T09:27:20.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21668124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91171
CVE ID: CVE-2014-0886 State: PUBLISHED Published: 2014-03-25T20:00:00 Last Updated: 2024-08-06T09:27:20.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21668124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91172
CVE ID: CVE-2014-0887 State: PUBLISHED Published: 2014-03-25T20:00:00 Last Updated: 2024-08-06T09:27:20.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21668124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91173
CVE ID: CVE-2014-0888 State: PUBLISHED Published: 2014-08-29T10:00:00 Last Updated: 2024-08-06T09:27:20.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682798 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91239
CVE ID: CVE-2014-0889 State: PUBLISHED Published: 2014-07-29T20:00:00 Last Updated: 2024-08-06T09:27:20.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/entdocview.wss?uid=swg21679081 - http://secunia.com/advisories/5
Container: References: - http://www-01.ibm.com/support/entdocview.wss?uid=swg21679081 - http://secunia.com/advisories/59681 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_cross_site_scripting_vulnerabilities_cve_2014_0889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91241
CVE ID: CVE-2014-0890 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:27:20.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1, when a certain com.ibm.collaboration.realtime.telephony.*.level setting is used, logs cleartext passwords during Audio/Video chat sessions, which allows local users to obtain sensitive information by reading a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21665658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91282
CVE ID: CVE-2014-0891 State: PUBLISHED Published: 2014-06-28T00:00:00 Last Updated: 2024-08-06T09:27:20.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information by leveraging incorrect request handling by the (1) Proxy or (2) ODR server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91286 - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI09786 - http://www-01.ibm.com/support/docview.wss?ui
d=swg21676092 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI09786 - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554
CVE ID: CVE-2014-0892 State: PUBLISHED Published: 2014-04-23T19:00:00 Last Updated: 2024-08-06T09:27:20.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by leveraging the absence of the NX protection mechanism and placing crafted x86 code on the stack, aka SPR KLYH9GGS9W. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/350089 - http://www-01.ibm.com/support/docview.wss?uid=swg21670264 - https://exchange.xforce.ibmcloud.com/vulnerabilities
50089 - http://www-01.ibm.com/support/docview.wss?uid=swg21670264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91286
CVE ID: CVE-2014-0893 State: PUBLISHED Published: 2014-05-26T16:00:00 Last Updated: 2024-08-06T09:27:20.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in customreport.jsp in IBM Maximo Asset Management 7.5.x before 7.5.0.5 IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91287 - http://www-01.ibm.com/support/docview.wss?uid=swg1
670870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91287 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV55019
CVE ID: CVE-2014-0894 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:27:20.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html - http://www.securityfocus.com/archive/1/532598/100/0/threaded - http://secunia.com/advisories/59296 - https://exchange.xforce.ibmcloud.com/vuln
us.com/archive/1/532598/100/0/threaded - http://secunia.com/advisories/59296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91313 - http://www-01.ibm.com/support/docview.wss?uid=swg21675881 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt - http://seclists.org/fulldisclosure/2014/Jun/173
CVE ID: CVE-2014-0895 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T09:27:20.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 3.0.1-IM-S3SAMPC-WIN32-FP001-IF02 allows remote attackers to execute arbitrary code via a crafted ComboList property value. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21666790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91314 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI09800 - http://www.solarwinds.com/documentation/orion/docs/releasenotes/releaseno
.ibm.com/support/docview.wss?uid=swg1PI09800 - http://www.solarwinds.com/documentation/orion/docs/releasenotes/releasenotes.htm
CVE ID: CVE-2014-0896 State: PUBLISHED Published: 2014-05-01T17:00:00 Last Updated: 2024-08-06T09:27:20.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91326 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI10134 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554
CVE ID: CVE-2014-0897 State: PUBLISHED Published: 2014-08-29T10:00:00 Last Updated: 2024-08-06T09:27:20.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module (CMM) account creation, which makes it easier for remote authenticated users to defeat cryptographic protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096153 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT03824 -
m.com/support/entry/portal/docdisplay?lndocid=MIGR-5096153 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT03824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91395
CVE ID: CVE-2014-0899 State: PUBLISHED Published: 2014-03-11T01:00:00 Last Updated: 2024-08-06T09:27:20.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpd in IBM AIX 7.1.1 before SP10 and 7.1.2 before SP5, when a Workload Partition (aka WPAR) for AIX 5.2 or 5.3 is used, allows remote authenticated users to bypass intended permission settings and modify arbitrary files via FTP commands. Additional Analyst Notes: - CVE Program Container: References: - http://aix.software.ibm.com/aix/efixes/security/wparcre_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IV51420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91396 - http://www.ibm.com/support/docview.wss?
s?uid=isg1IV51420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91396 - http://www.ibm.com/support/docview.wss?uid=isg1IV51421
CVE ID: CVE-2014-0900 State: PUBLISHED Published: 2018-04-20T21:00:00 Last Updated: 2024-08-06T09:27:20.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Device Administrator code in Android before 4.4.1_r1 might allow attackers to spoof device administrators and consequently bypass MDM restrictions by leveraging failure to update the mAdminMap data structure. Additional Analyst Notes: - CVE Program Container: References: - https://securityintelligence.com/how-to-cheat-your-mdm-compliance-without-a-password/
CVE ID: CVE-2014-0901 State: PUBLISHED Published: 2014-04-02T01:00:00 Last Updated: 2024-08-06T09:27:20.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Social Rendering implementation in the IBM Connections integration in IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91398 - http://www-01.ibm.com/support/docview.wss?uid=swg21667016 - http://www.securityfocus.com/bid/66559 - http://www-01.ibm.com/support/docview.ws
/support/docview.wss?uid=swg21667016 - http://www.securityfocus.com/bid/66559 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI12659
CVE ID: CVE-2014-0904 State: PUBLISHED Published: 2014-03-26T10:00:00 Last Updated: 2024-08-06T09:27:20.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity checks of downloaded files, which allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21666775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91536
CVE ID: CVE-2014-0905 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T09:27:20.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere BigInsights 2.0 through 2.1.2 does not set the secure flag for the LTPA cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21680830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91720
CVE ID: CVE-2014-0906 State: PUBLISHED Published: 2014-05-26T01:00:00 Last Updated: 2024-08-06T09:27:20.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check whether a session cookie is current, which allows remote attackers to conduct user-search actions by leveraging possession of a (1) expired or (2) invalidated cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91854 - http://www-01.ibm.com/support/docview.wss?uid=swg21671201
CVE ID: CVE-2014-0907 State: PUBLISHED Published: 2014-05-30T23:00:00 Last Updated: 2024-08-06T09:27:20.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jun/7 - http://www-304.ibm.com/support/docview.wss?uid=swg21676135 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT00686 - http://www.ibm.com/support/docview.w
w.wss?uid=swg21676135 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT00686 - http://www.ibm.com/support/docview.wss?uid=swg1IT00686 - http://www.ibm.com/support/docview.wss?uid=swg21672100 - http://www-01.ibm.com/support/docview.wss?uid=isg400001843 - http://secunia.com/advisories/59463 - http://www-01.ibm.com/support/docview.wss?uid=isg400001841 - http://www.ibm.com/support/docview.wss?uid=swg21610582#4 - http://www.securitytracker.com/id/1030670 - http://www.securityfocus.com/bid/67617 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT00685 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0907/ - http://www-01.ibm.com/support/doc
llis-security.com/security-research-and-downloads/security-advisories/cve-2014-0907/ - http://www-01.ibm.com/support/docview.wss?uid=swg21680454 - http://www.securitytracker.com/id/1030671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91869 - http://secunia.com/advisories/60482 - http://secunia.com/advisories/59451 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT00687 - http://packetstormsecurity.com/files/126940/IBM-DB2-Privilege-Escalation.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IT00684 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT00627
CVE ID: CVE-2014-0908 State: PUBLISHED Published: 2014-04-10T23:00:00 Last Updated: 2024-08-06T09:27:20.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User Attribute implementation in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.2, and 8.5.x through 8.5.0.1 does not verify authorization for read or write access to attribute values, which allows remote authenticated users to obtain sensitive information, configure e-mail notifications, or modify task assignments via REST API calls. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21669330 - http://www-01.ibm.com/support/docvi
Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21669330 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91870
CVE ID: CVE-2014-0909 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T09:27:20.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69642 - http://www-01.ibm.com/support/docview.wss?uid=swg24038045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91872 - http:/
www-01.ibm.com/support/docview.wss?uid=swg24038045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91872 - http://www-01.ibm.com/support/docview.wss?uid=swg21681449
CVE ID: CVE-2014-0910 State: PUBLISHED Published: 2014-06-18T16:00:00 Last Updated: 2024-08-06T09:27:20.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, and 7.0.0 through 7.0.0.2 CF28 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91875 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI18845 - http://www-01.ibm.com/support/docview.wss?uid=swg21675257
CVE ID: CVE-2014-0911 State: PUBLISHED Published: 2014-05-07T10:00:00 Last Updated: 2024-08-06T09:27:20.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: inetd in IBM WebSphere MQ 7.1.x before 7.1.0.5 and 7.5.x before 7.5.0.4 allows remote attackers to cause a denial of service (disk or CPU consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV55886 - http://www-01.ibm.com/support/docview.wss?uid=swg21670374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91876
CVE ID: CVE-2014-0912 State: PUBLISHED Published: 2018-04-20T21:00:00 Last Updated: 2024-08-06T09:27:20.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vectors related to an error page. IBM X-Force ID: 92072. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92072 - http://www-01.ibm.com/support/docview.wss?uid=swg21674739
CVE ID: CVE-2014-0913 State: PUBLISHED Published: 2014-05-09T01:00:00 Last Updated: 2024-08-06T09:27:20.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an e-mail message, aka SPR BFEY9GXHZE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030215 - http://www-01.ibm.com/support/docview.wss?uid=swg21671981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91880