Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0815 State: PUBLISHED Published: 2014-02-06T22:00:00 Last Updated: 2024-08-06T09:27:20.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91090 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000014 - http://www.securityfocus.com/bid/65391 - http://blogs.opera.com/security/2014/01/security-changes-features-opera-19/ - http://jvn.jp/en/jp/JVN23256725/index.html
CVE ID: CVE-2014-0816 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:27:20.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000026 - http://jvn.jp/en/jp/JVN02017463/995510/index.html - http://jvn.jp/en/jp/JVN02017463/index.html
CVE ID: CVE-2014-0817 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:27:20.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 does not properly manage sessions, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/gr20140225up03.php - https://support.cybozu.com/ja-jp/article/7992 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000021 - http://jvn.jp/en/jp/JVN24035499/index.html
CVE ID: CVE-2014-0818 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:20.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000019 - http://jvn.jp/en/jp/JVN33382534/index.html
CVE ID: CVE-2014-0819 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:20.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000020 - http://jvn.jp/en/jp/JVN43254599/index.html
CVE ID: CVE-2014-0820 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:27:20.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN26393529/index.html - http://cs.cybozu.co.jp/information/gr20140225up05.php - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000023 - https://support.cybozu.com/ja-jp/article/7994 - http://www.securityfocus.com/bid/65815
CVE ID: CVE-2014-0821 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:27:20.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6930 and CVE-2013-6931. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN71045461/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000024 - https://support.cybozu.com/ja-jp/article/7993 - http://www.securityfocus.com/bid/65809 - http://cs.cybozu.co
14-000024 - https://support.cybozu.com/ja-jp/article/7993 - http://www.securityfocus.com/bid/65809 - http://cs.cybozu.co.jp/information/gr20140225up04.php
CVE ID: CVE-2014-0822 State: PUBLISHED Published: 2014-02-06T23:00:00 Last Updated: 2024-08-06T09:27:20.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP server in IBM Domino 8.5.x before 8.5.3 FP6 IF1 and 9.0.x before 9.0.1 FP1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, aka SPR KLYH9F4S2Z. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102912 - http://secunia.com/advisories/56791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90235 - http://www-01.ibm.com/support/docview.wss?uid=swg21663023
CVE ID: CVE-2014-0823 State: PUBLISHED Published: 2014-05-01T17:00:00 Last Updated: 2024-08-06T09:27:20.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://www.securityfocus.com/bid/67329 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI05324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90498 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554
CVE ID: CVE-2014-0824 State: PUBLISHED Published: 2014-05-26T16:00:00 Last Updated: 2024-08-06T09:27:20.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140321-1336 and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140218-1510 allows remote authenticated users to inject arbitrary web script or HTML via an attachment URL. Additional Analyst Notes: - CVE Program Container: Referenc
o inject arbitrary web script or HTML via an attachment URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV52829 - http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90500
CVE ID: CVE-2014-0825 State: PUBLISHED Published: 2014-05-26T16:00:00 Last Updated: 2024-08-06T09:27:20.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in openreport.jsp in IBM Maximo Asset Management 7.x before 7.1.1.12 IFIX.20140321-1336 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.12 IFIX.20140218-1510 allows remote authenticated users to inject arbitrary web script or HTML via a crafted report parameter. Addit
0218-1510 allows remote authenticated users to inject arbitrary web script or HTML via a crafted report parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90501 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV53362
CVE ID: CVE-2014-0827 State: PUBLISHED Published: 2014-04-05T01:00:00 Last Updated: 2024-08-06T09:27:20.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21669093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90503 - http://www.securityfocus.com/bid/66621
CVE ID: CVE-2014-0828 State: PUBLISHED Published: 2014-04-02T01:00:00 Last Updated: 2024-08-06T09:27:20.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WCM (Web Content Manager) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21667016 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI10734 - https://exchange.xforce.ibmcloud.com
w.wss?uid=swg21667016 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI10734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90566 - http://www.securityfocus.com/bid/66556
CVE ID: CVE-2014-0829 State: PUBLISHED Published: 2014-03-21T10:00:00 Last Updated: 2024-08-06T09:27:20.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in IBM Rational ClearCase 7.x before 7.1.2.13, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.3 allow remote authenticated users to obtain privileged access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?&uid=swg21662086 - http://www.securityfocus.com/bid/66339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90568
CVE ID: CVE-2014-0830 State: PUBLISHED Published: 2014-02-01T15:00:00 Last Updated: 2024-08-06T09:27:20.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21662714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90584
CVE ID: CVE-2014-0831 State: PUBLISHED Published: 2014-02-01T15:00:00 Last Updated: 2024-08-06T09:27:20.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that modify configuration data. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21662714 - http://osvdb.org/102766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90585
CVE ID: CVE-2014-0832 State: PUBLISHED Published: 2014-02-01T15:00:00 Last Updated: 2024-08-06T09:27:20.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90586 - http://www-01.ibm.com/support/docview.wss?uid=swg21662714
CVE ID: CVE-2014-0833 State: PUBLISHED Published: 2014-02-01T15:00:00 Last Updated: 2024-08-06T09:27:20.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intended access restrictions via an unspecified process step. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21662714 - http://osvdb.org/102767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90612
CVE ID: CVE-2014-0834 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T09:27:20.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM General Parallel File System (GPFS) 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denial of service (daemon crash) via crafted arguments to a setuid program. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=isg3T1020542 - http://www.securityfocus.com/bid/65297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90647 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV52863 - http://osvdb.org/102765 - http://www-01.ibm.com/suppor
647 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV52863 - http://osvdb.org/102765 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV54381
CVE ID: CVE-2014-0835 State: PUBLISHED Published: 2014-01-30T02:00:00 Last Updated: 2024-08-06T09:27:20.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90678 - http://thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html - http://www-01.ibm.com/support/docview.wss?uid=swg21663066 - ht
gspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html - http://www-01.ibm.com/support/docview.wss?uid=swg21663066 - http://osvdb.org/102554 - http://seclists.org/fulldisclosure/2014/Jan/166 - http://secunia.com/advisories/56653
CVE ID: CVE-2014-0836 State: PUBLISHED Published: 2014-01-30T02:00:00 Last Updated: 2024-08-06T09:27:20.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90679 - http://osvdb.org/102555 - http://www-01.ibm.com/support/docview.wss?uid=swg21663066 - http://seclists.org/fulldisclosure/2014/Jan/166 - http://secunia.com/advisories/56653
CVE ID: CVE-2014-0837 State: PUBLISHED Published: 2014-01-30T02:00:00 Last Updated: 2024-08-06T09:27:20.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65127 - http://osvdb.org/102552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90680 - http://www-01.ibm.com/support/docview.wss?uid=swg21663066 - http://seclists.org/fulldisclosure/2014/Jan/166 - http://secunia.com/a
-01.ibm.com/support/docview.wss?uid=swg21663066 - http://seclists.org/fulldisclosure/2014/Jan/166 - http://secunia.com/advisories/56653
CVE ID: CVE-2014-0838 State: PUBLISHED Published: 2014-01-30T02:00:00 Last Updated: 2024-08-06T09:27:20.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102553 - http://www.securityfocus.com/bid/65127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90681 - http://www-01.ibm.com/support/docview.wss?uid=swg21663066
CVE ID: CVE-2014-0839 State: PUBLISHED Published: 2014-02-25T21:00:00 Last Updated: 2024-08-06T09:27:20.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to modify data via vectors involving a direct object reference. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21665005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90696
CVE ID: CVE-2014-0840 State: PUBLISHED Published: 2014-02-25T21:00:00 Last Updated: 2024-08-06T09:27:20.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90698 - http://www.securityfocus.com/bid/65737 - http://www-01.ibm.com/support/docview.wss?uid=swg21665005
CVE ID: CVE-2014-0841 State: PUBLISHED Published: 2018-04-27T16:00:00 Last Updated: 2024-08-06T09:27:20.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack. IBM X-Force ID: 90704. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/blogs/psirt/ibm-security-bulletin-weak-password-hash-vulnerability-in-rational-focalpoint-cve-2014-0841/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/90704
CVE ID: CVE-2014-0842 State: PUBLISHED Published: 2014-02-25T21:00:00 Last Updated: 2024-08-06T09:27:20.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21665005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90706
CVE ID: CVE-2014-0843 State: PUBLISHED Published: 2014-02-25T21:00:00 Last Updated: 2024-08-06T09:27:20.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65730 - http://www-01.ibm.com/support/docview.wss?uid=swg21665005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90714
CVE ID: CVE-2014-0844 State: PUBLISHED Published: 2014-03-04T22:00:00 Last Updated: 2024-08-06T09:27:20.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote authenticated users to read arbitrary data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21664412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90718
CVE ID: CVE-2014-0845 State: PUBLISHED Published: 2014-03-04T22:00:00 Last Updated: 2024-08-06T09:27:20.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21664412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90719 - http://www.securityfocus.com/bid/65916
CVE ID: CVE-2014-0846 State: PUBLISHED Published: 2014-03-04T22:00:00 Last Updated: 2024-08-06T09:27:20.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21664412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90720 - http://www.securityfocus.com/bid/65917
CVE ID: CVE-2014-0848 State: PUBLISHED Published: 2014-03-26T10:00:00 Last Updated: 2024-08-06T09:27:20.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ssl.conf and (2) httpd.conf files in the Apache HTTP Server component in IBM Netezza Performance Portal 2.0 before 2.0.0.4 have weak SSLCipherSuite values, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90723 - http://www-01.ibm.com/support/docview.wss?uid=swg21665278
CVE ID: CVE-2014-0849 State: PUBLISHED Published: 2014-05-26T16:00:00 Last Updated: 2024-08-06T09:27:20.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to gain privileges by leveraging membership in two security groups. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV53952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90738
CVE ID: CVE-2014-0850 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T09:27:20.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Reference Data Management (RDM) Hub 10.1 and 11.0 before 11.0.0.0-MDM-IF008 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90751 - http://www-01.ibm.com/support/docview.wss?uid=swg21666119
CVE ID: CVE-2014-0852 State: PUBLISHED Published: 2014-08-16T01:00:00 Last Updated: 2024-08-06T09:27:20.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere DataPower SOA appliances through 4.0.2.15, 5.x through 5.0.0.17, 6.0.0.x through 6.0.0.9, and 6.0.1.x through 6.0.1.5 make it easier for remote attackers to obtain a PreMasterSecret value and defeat cryptographic protection mechanisms by sending a large number of requests in an SSL/TLS side-channel timing attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60112 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT01111 - http://www-01.ibm.com/support/docview.ws
/advisories/60112 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT01111 - http://www-01.ibm.com/support/docview.wss?uid=swg21678204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90753