Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0093 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T03:55:28.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0088, CVE-2015-0090, CVE-2015-0091, and CVE-2015-0092. Additional Analyst Notes: - CVE Program Container: References: - https://do
2015-0090, CVE-2015-0091, and CVE-2015-0092. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-021 - http://www.securitytracker.com/id/1031889 - http://www.securityfocus.com/bid/72907
CVE ID: CVE-2015-0094 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T03:55:28.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly restrict the availability of address information during a function call, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: Refere
ka "Microsoft Windows Kernel Memory Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031897 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-023
CVE ID: CVE-2015-0095 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T03:55:28.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to cause a denial of service (NULL pointer dereference and blue screen), or obtain sensitive information from kernel memory and possibly bypass the ASLR protection mechanism, via a crafted application, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability." Additional Analyst Notes: - CVE
a a crafted application, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031897 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-023 - http://www.securityfocus.com/bid/72936
CVE ID: CVE-2015-0096 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T03:55:27.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, leading to DLL loading during Windows Explorer access to the icon of a crafted shortcut, aka "DLL Planting Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References:
aka "DLL Planting Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031890 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-020 - http://www.securityfocus.com/bid/72894
CVE ID: CVE-2015-0097 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T03:55:28.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37657/ - http://www.securitytracker.com/id/1031896 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-022
CVE ID: CVE-2015-0098 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T03:55:28.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task, aka "Task Scheduler Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-037 - http://www.securitytracker.com/id/1032112
CVE ID: CVE-2015-0099 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T03:55:28.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018 - http://www.securitytracker.com/id/1031888 - http://www.securityfocus.com/bid/72925
CVE ID: CVE-2015-0100 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T03:55:27.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018 - http://www.securitytracker.com/id/1031888 - http://www.securityfocus.com/bid/72926
CVE ID: CVE-2015-0101 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T03:55:27.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; IBM Business Process Manager Express 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; and IBM Business Process Manager Advanced 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72920 - http://www-01.ibm.com/support/docview.wss?uid=swg21693134
CVE ID: CVE-2015-0102 State: PUBLISHED Published: 2020-02-05T17:23:45 Last Updated: 2024-08-06T03:55:28.003Z Vendors: IBM Products: Workflow for Bluemix Problem Types: Other Description: IBM Workflow for Bluemix does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21694941 - http://www.securityfocus.com/bid/74220 - https://www.ibm.com/blogs/psirt/ibm-security-bulletin-authentication-session-cookie-in-ibm-workflow-for-bluemix-was-missing-se
//www.ibm.com/blogs/psirt/ibm-security-bulletin-authentication-session-cookie-in-ibm-workflow-for-bluemix-was-missing-secure-flag-cve-2015-0102/
CVE ID: CVE-2015-0103 State: PUBLISHED Published: 2015-03-24T00:00:00 Last Updated: 2024-08-06T03:55:28.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Process Portal in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified data fields. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50457 - http://www-01.ibm.com/support/docview.wss?uid=swg21693270
CVE ID: CVE-2015-0104 State: PUBLISHED Published: 2017-04-24T06:12:00 Last Updated: 2024-08-06T03:55:28.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002 allow remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97999 - http://www-01.ibm.com/support/docview.wss?uid=swg2169497
ntainer: References: - http://www.securityfocus.com/bid/97999 - http://www-01.ibm.com/support/docview.wss?uid=swg21694974
CVE ID: CVE-2015-0105 State: PUBLISHED Published: 2015-03-24T00:00:00 Last Updated: 2024-08-06T03:55:28.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21694937 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50607 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50162
CVE ID: CVE-2015-0106 State: PUBLISHED Published: 2015-03-24T00:00:00 Last Updated: 2024-08-06T03:55:28.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21694935 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50795
CVE ID: CVE-2015-0107 State: PUBLISHED Published: 2017-04-24T06:12:00 Last Updated: 2024-08-06T03:55:28.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002 allow remote authenticated users to conduct directory traversal attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97998 - http://www-01.ibm.com/support/docview.wss?u
VE Program Container: References: - http://www.securityfocus.com/bid/97998 - http://www-01.ibm.com/support/docview.wss?uid=swg21694974
CVE ID: CVE-2015-0108 State: PUBLISHED Published: 2015-02-18T02:00:00 Last Updated: 2024-08-06T03:55:28.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-0104, CVE-2015-0107, and CVE-2015-0109. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99605 - http://www-01
Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99605 - http://www-01.ibm.com/support/docview.wss?uid=swg21694974
CVE ID: CVE-2015-0109 State: PUBLISHED Published: 2015-02-18T02:00:00 Last Updated: 2024-08-06T03:55:28.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-0104, CVE-2015-0107, and CVE-2015-0108. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99606 - http://www-01
Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99606 - http://www-01.ibm.com/support/docview.wss?uid=swg21694974
CVE ID: CVE-2015-0110 State: PUBLISHED Published: 2017-09-15T20:00:00 Last Updated: 2024-08-06T03:55:28.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL. Additional Analyst Notes: - CVE Program Container: References: - https://www-304.ibm.com/support/docview.wss?uid=swg21694940 - http://www.securityfocus.com/bid/73274
CVE ID: CVE-2015-0112 State: PUBLISHED Published: 2015-06-07T18:00:00 Last Updated: 2024-08-06T03:55:28.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager (RQM) 2.0 through 2.0.1, 3.0 through 3.0.1.6, 4.0 through 4.0.7, and 5.0 through 5.0.2; Rational Team Concert (RTC) 2.0 through 2.0.0.2, 3.x before 3.0.1.6 IF6, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Requirements Composer (RRC) 2.0 through 2.0.0.4, 3.x before 3.0.1.6 IF6, and 4.0 through 4.0.7; Rational DOORS Next Generation (RDNG) 4.x bef
(RRC) 2.0 through 2.0.0.4, 3.x before 3.0.1.6 IF6, and 4.0 through 4.0.7; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF5 and 5.x before 5.0.2 IF4; Rational Engineering Lifecycle Manager (RELM) 1.0 through 1.0.0.1, 4.0.3 through 4.0.7, and 5.0 through 5.0.2; Rational Rhapsody Design Manager (DM) 3.0 through 3.0.1, 4.0 through 4.0.7, and 5.0 through 5.0.2; and Rational Software Architect Design Manager (RSA DM) 3.0 through 3.0.1, 4.0 through 4.0.7, and 5.0 through 5.0.2 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - C
on in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21957763
CVE ID: CVE-2015-0113 State: PUBLISHED Published: 2015-04-27T01:00:00 Last Updated: 2024-08-06T03:55:28.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next Generation 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Engineering Lifecycle Manager 4.0.3 through 4.0.7 and 5.0 through 5.0.2, Rational Rhapsody Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, and Rational Software Architect De
ough 5.0.2, Rational Rhapsody Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, and Rational Software Architect Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2 allows remote attackers to read JSP source code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21882770
CVE ID: CVE-2015-0114 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T03:55:27.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72914 - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020540
CVE ID: CVE-2015-0115 State: PUBLISHED Published: 2015-06-28T22:00:00 Last Updated: 2024-08-06T03:55:28.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to hijack the authentication of customer accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21902807
CVE ID: CVE-2015-0116 State: PUBLISHED Published: 2015-06-28T22:00:00 Last Updated: 2024-08-06T03:55:28.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict the addition of links, which makes it easier for remote authenticated users to conduct cross-site request forgery (CSRF) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21902807
CVE ID: CVE-2015-0117 State: PUBLISHED Published: 2015-04-06T00:00:00 Last Updated: 2024-08-06T03:55:27.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP Server in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, aka SPR KLYH9SLRGM. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700029 - http://www.securitytracker.com/id/1032027
CVE ID: CVE-2015-0118 State: PUBLISHED Published: 2015-06-28T22:00:00 Last Updated: 2024-08-06T03:55:28.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Message Broker Toolkit 7 before 7007 IF2 and 8 before 8005 IF1 and Integration Toolkit 9 before 9003 IF1 are distributed with MQ client JAR files that support only weak TLS ciphers, which might make it easier for remote attackers to obtain sensitive information by sniffing the network during a connection to an Integration Bus node. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21957998 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05725
CVE ID: CVE-2015-0119 State: PUBLISHED Published: 2015-04-06T00:00:00 Last Updated: 2024-08-06T03:55:28.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastBack Mount in IBM Tivoli Storage Manager FastBack 6.1.x before 6.1.11.1 allows remote attackers to execute arbitrary code by connecting to the Mount port. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21699645
CVE ID: CVE-2015-0120 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T03:55:28.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700549
CVE ID: CVE-2015-0121 State: PUBLISHED Published: 2015-05-30T19:00:00 Last Updated: 2024-08-06T03:55:28.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management (RM) session upon LTPA token expiration, which allows remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21903761 - http://
nalyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21903761 - http://www.securityfocus.com/bid/74910
CVE ID: CVE-2015-0122 State: PUBLISHED Published: 2015-03-13T01:00:00 Last Updated: 2024-08-06T03:55:28.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0123. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698253 - http://www.securitytracker.com/id/1031884 - http://www.securityfocus.com/bid/73093
CVE ID: CVE-2015-0123 State: PUBLISHED Published: 2015-03-13T01:00:00 Last Updated: 2024-08-06T03:55:28.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0122. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698253 - http://www.securitytracker.com/id/1031884 - http://www.securityfocus.com/bid/73101
CVE ID: CVE-2015-0124 State: PUBLISHED Published: 2015-03-18T10:00:00 Last Updated: 2024-08-06T03:55:28.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0128. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73103 - http://www-01.ibm.com/support/docview.wss?uid=swg21696927 - http://www.securitytracker.com/id/1031885
CVE ID: CVE-2015-0125 State: PUBLISHED Published: 2015-03-18T10:00:00 Last Updated: 2024-08-06T03:55:28.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 4.x before 4.0.7 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21697297 - http://www.securityfocus.com/bid/73105
CVE ID: CVE-2015-0126 State: PUBLISHED Published: 2015-06-28T22:00:00 Last Updated: 2024-08-06T03:55:28.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to bypass intended file-upload restrictions via a modified extension. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21902807