rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-1548 
IBM API Connect 2018.1.0.0, 2018.2.1, 2018.2.2, 2018.2.3, and 2018.2.4 contains a vulnerability that could allow an authenticated user to obtain sensitive information. IBM X-Force ID: 142657.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: API Connect
Published: 2018-07-09T13:00:00.000Z
CVE-2018-1549 
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 142658.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-07-10T16:00:00.000Z
CVE-2018-1550 
IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users. IBM X-Force ID: 142696.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Spectrum Protect
Published: 2018-09-26T15:00:00.000Z
CVE-2018-1551 
IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: WebSphere MQ
Published: 2018-08-06T14:00:00.000Z
CVE-2018-1552 
IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 142889.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Robotic Process Automation with Automation Anywhere
Published: 2018-11-02T15:00:00.000Z
CVE-2018-1553 
IBM WebSphere Application Server Liberty prior to 18.0.0.2 could allow a remote attacker to obtain sensitive information, caused by mishandling of exceptions by the SAML Web SSO feature. IBM X-Force ID: 142890.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: IBM WebSphere Application Server Liberty
Published: 2018-06-27T18:00:00.000Z
CVE-2018-1554 
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142891.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2018-08-02T14:00:00.000Z
CVE-2018-1555 
IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142892.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: FileNet P8 Platform
Published: 2018-07-06T14:00:00.000Z
CVE-2018-1556 
IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142893.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: FileNet P8 Platform
Published: 2018-07-06T14:00:00.000Z
CVE-2018-1557 
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142955.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-10-02T15:00:00.000Z
CVE-2018-1558 
IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142956.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-10-02T15:00:00.000Z
CVE-2018-1560 
IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142958.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Engineering Lifecycle Manager
Published: 2018-09-25T16:00:00.000Z
CVE-2018-1563 
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142967.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling File Gateway
Published: 2018-07-20T16:00:00.000Z
CVE-2018-1564 
IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges to obtain user passwords found in debugging messages. IBM X-Force ID: 142968.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2018-07-20T16:00:00.000Z
CVE-2018-1565 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 143022.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-05-25T14:00:00.000Z
CVE-2018-1566 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to execute arbitrary code due to a format string error. IBM X-Force ID: 143023.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-07-10T16:00:00.000Z
CVE-2018-1567 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through the SOAP connector with a serialized object from untrusted sources. IBM X-Force ID: 143024.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2018-09-07T16:00:00.000Z
CVE-2018-1568 
IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 143118.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2018-12-05T17:00:00.000Z
CVE-2018-1571 
IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 143121.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2018-09-11T12:00:00.000Z
CVE-2018-1583 
IBM StoredIQ 7.6 could allow an authenticated attacker to bypass certain security restrictions. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to access and manipulate documents on StoredIQ managed data sources. IBM X-Force ID: 143331.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: StoredIQ
Published: 2018-05-22T13:00:00.000Z
CVE-2018-1584 
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143497.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2018-11-28T17:00:00.000Z
CVE-2018-1585 
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143498.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational Rhapsody Design Manager
Published: 2018-07-19T14:00:00.000Z
CVE-2018-1587 
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational Rhapsody Design Manager
Published: 2018-07-19T14:00:00.000Z
CVE-2018-1588 
IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 143501.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Engineering Lifecycle Manager
Published: 2018-09-25T16:00:00.000Z
CVE-2018-1593 
IBM Multi-Cloud Data Encryption (MDE) 2.1 could allow an unauthorized user to manipulate data due to missing file checksums. IBM X-Force ID: 143568.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Multi-Cloud Data Encryption
Published: 2018-10-02T15:00:00.000Z
CVE-2018-1595 
IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary commands due to improper handling of user supplied input. IBM X-Force ID: 143622.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Symphony
Published: 2018-08-01T17:00:00.000Z
CVE-2018-1599 
IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 143744.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: API Connect
Published: 2018-08-22T11:00:00.000Z
CVE-2018-1600 
IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 143745.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Platform
Published: 2018-06-04T17:00:00.000Z
CVE-2018-1601 
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143791.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-10-02T15:00:00.000Z
CVE-2018-1602 
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143792.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-10-04T15:00:00.000Z
CVE-2018-1603 
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143793.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-10-04T15:00:00.000Z
CVE-2018-1604 
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143794.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-10-04T15:00:00.000Z
CVE-2018-1605 
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143795.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-10-02T15:00:00.000Z
CVE-2018-1606 
IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow an authenticated user to obtain sensitive information from an error message that could be used in further attacks against the system. IBM X-Force ID: 143796.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Engineering Lifecycle Manager
Published: 2018-11-06T16:00:00.000Z
CVE-2018-1607 
IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 143797.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Engineering Lifecycle Manager
Published: 2018-09-25T16:00:00.000Z
CVE-2018-1608 
IBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 143798.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Engineering Lifecycle Manager
Published: 2019-05-01T15:15:20.830Z
CVE-2018-1610 
IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143931.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2018-09-26T15:00:00.000Z
CVE-2018-1612 
IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information. IBM X-Force ID: 144164.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2018-07-17T16:00:00.000Z
CVE-2018-1614 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML responses from the SAML identity provider could allow a remote attacker to obtain sensitive information. IBM X-Force ID: 144270.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2018-06-26T20:00:00.000Z
CVE-2018-1618 
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 144343.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Privileged Identity Manager
Published: 2019-04-02T13:20:33.412Z
CVE-2018-1621 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2018-07-06T14:00:00.000Z
CVE-2018-1622 
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 144348.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Privileged Identity Manager
Published: 2019-04-02T13:20:33.561Z
CVE-2018-1623 
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 144408.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Privileged Identity Manager
Published: 2019-04-02T13:20:33.617Z
CVE-2018-1625 
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 144410.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Privileged Identity Manager
Published: 2019-04-02T13:20:33.662Z
CVE-2018-1626 
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 144411.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Privileged Identity Manager
Published: 2019-04-02T13:20:33.705Z
CVE-2018-1630 
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onmode. IBM X-Force ID: 144430.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Informix Dynamic Server Enterprise Edition
Published: 2019-08-20T18:50:22.628Z
CVE-2018-1631 
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohash. IBM X-Force ID: 144431.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Informix Dynamic Server Enterprise Edition
Published: 2019-08-20T18:50:22.686Z
CVE-2018-1632 
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in .infxdirs. IBM X-Force ID: 144432.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Informix Dynamic Server Enterprise Edition
Published: 2019-08-20T18:50:22.739Z
CVE-2018-1633 
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onsrvapd. IBM X-Force ID: 144434.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Informix Dynamic Server Enterprise Edition
Published: 2019-08-20T18:50:22.800Z
CVE-2018-1634 
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID: 144437.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Informix Dynamic Server Enterprise Edition
Published: 2019-08-20T18:50:22.855Z
CVE-2018-1635 
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144439.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Informix Dynamic Server Enterprise Edition
Published: 2019-08-20T18:50:22.913Z
CVE-2018-1636 
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144441.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Informix Dynamic Server Enterprise Edition
Published: 2019-08-20T18:50:22.967Z
CVE-2018-1638 
IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) while resetting a user password but enforces it for all other login scenarios. IBM X-Force ID: 144483.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: API Connect
Published: 2018-07-31T13:00:00.000Z
CVE-2018-1639 
The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned privileges. IBM X-Force ID: 144579.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Jazz Reporting Service
Published: 2018-11-16T16:00:00.000Z