rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-1199 
IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123674.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: InfoSphere Master Data Management
Published: 2017-08-03T15:00:00.000Z
CVE-2017-1200 
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 123675.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Compliance
Published: 2019-02-05T18:00:00.000Z
CVE-2017-1201 
IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Compliance Analytics
Published: 2017-10-05T17:00:00.000Z
CVE-2017-1202 
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: BigFix Compliance
Published: 2019-02-05T18:00:00.000Z
CVE-2017-1203 
IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123678.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: BigFix family
Published: 2017-07-19T20:00:00.000Z
CVE-2017-1204 
IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains hard-coded credentials. A remote attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 123740.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Tealeaf Customer Experience
Published: 2018-01-26T21:00:00.000Z
CVE-2017-1205 
IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root access. IBM X-Force ID: 123741.
Problem types: description: Gain Privileges
Affected products: vendor: IBM Corporation
product: Spectrum LSF
Published: 2017-04-14T16:00:00.000Z
CVE-2017-1207 
IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Integration Bus
Published: 2017-07-05T17:00:00.000Z
CVE-2017-1208 
IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123778.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2017-07-05T17:00:00.000Z
CVE-2017-1209 
IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123849.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Daeja ViewONE
Published: 2017-10-24T21:00:00.000Z
CVE-2017-1210 
IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look legitimate. IBM X-Force ID: 123850.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Daeja ViewONE
Published: 2017-10-24T21:00:00.000Z
CVE-2017-1211 
IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled. IBM X-Force ID: 123851.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Daeja ViewONE
Published: 2017-10-24T21:00:00.000Z
CVE-2017-1212 
IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to a denial of service when viewing or opening a large file. IBM X-Force ID: 123852.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Daeja ViewONE
Published: 2017-10-24T21:00:00.000Z
CVE-2017-1214 
IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure. IBM X-Force ID: 123854.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: iNotes
Published: 2017-06-12T19:00:00.000Z
CVE-2017-1217 
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123857
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Portal
Published: 2017-07-05T13:00:00.000Z
CVE-2017-1218 
IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123858.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: BigFix family
Published: 2017-07-19T20:00:00.000Z
CVE-2017-1219 
IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 123859.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix family
Published: 2017-07-19T20:00:00.000Z
CVE-2017-1220 
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123860.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T21:00:00.000Z
CVE-2017-1221 
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Platform
Published: 2017-11-13T23:00:00.000Z
CVE-2017-1222 
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 123862.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T21:00:00.000Z
CVE-2017-1223 
IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123902.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: BigFix family
Published: 2017-07-19T20:00:00.000Z
CVE-2017-1224 
IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123903.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix family
Published: 2017-07-19T20:00:00.000Z
CVE-2017-1225 
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T21:00:00.000Z
CVE-2017-1226 
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T21:00:00.000Z
CVE-2017-1227 
IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: BigFix Platform
Published: 2017-07-31T21:00:00.000Z
CVE-2017-1228 
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123907.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T21:00:00.000Z
CVE-2017-1229 
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123908.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix family
Published: 2017-11-13T23:00:00.000Z
CVE-2017-1230 
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. This weakness may allow attackers to expose sensitive information by guessing tokens or identifiers. IBM X-Force ID: 123909.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T21:00:00.000Z
CVE-2017-1231 
IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123910.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Platform
Published: 2018-10-12T05:00:00.000Z
CVE-2017-1232 
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 123911.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T21:00:00.000Z
CVE-2017-1233 
IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be executed with Local System or root privileges. IBM X-Force ID: 123912.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: BigFix Remote Control
Published: 2018-01-31T15:00:00.000Z
CVE-2017-1234 
IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123913.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2017-06-27T16:00:00.000Z
CVE-2017-1235 
IBM WebSphere MQ 8.0 could allow an authenticated user to cause a premature termination of a client application thread which could potentially cause denial of service. IBM X-Force ID: 123914.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2017-09-25T16:00:00.000Z
CVE-2017-1236 
IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inquiry. IBM X-Force ID: 124354
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2017-07-06T14:00:00.000Z
CVE-2017-1237 
IBM Jazz based applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124355.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational Team Concert
Published: 2018-07-06T14:00:00.000Z
CVE-2017-1238 
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124356.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-07-06T14:00:00.000Z
CVE-2017-1239 
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124357.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-07-06T14:00:00.000Z
CVE-2017-1240 
IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1241 
An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2017-10-25T12:00:00.000Z
CVE-2017-1242 
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124524.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-07-06T14:00:00.000Z
CVE-2017-1245 
IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124580.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Rhapsody Design Manager
Published: 2017-07-24T21:00:00.000Z
CVE-2017-1247 
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124627.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational DOORS Next Generation
Published: 2017-06-12T19:00:00.000Z
CVE-2017-1248 
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124628.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-07-06T14:00:00.000Z
CVE-2017-1249 
IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Rhapsody Design Manager
Published: 2017-07-24T21:00:00.000Z
CVE-2017-1250 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force 124630.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Quality Manager
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1251 
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1253 
IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 124633.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-07-05T18:00:00.000Z
CVE-2017-1254 
IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 124634.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-07-05T18:00:00.000Z
CVE-2017-1255 
IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 124675.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2018-05-02T13:00:00.000Z
CVE-2017-1256 
IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124678
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-07-05T13:00:00.000Z
CVE-2017-1257 
IBM Security Guardium 10.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 124684.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1258 
IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 124685
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-07-05T13:00:00.000Z
CVE-2017-1261 
IBM Security Guardium 10.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 124736.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1262 
IBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 124737.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1264 
IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM X-Force ID: 124739.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-07-05T18:00:00.000Z
CVE-2017-1265 
IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) techniques. IBM X-Force ID: 124740.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Security Guardium
Published: 2018-12-17T16:00:00.000Z
CVE-2017-1266 
IBM Security Guardium 10.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 124741.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1267 
IBM Security Guardium 10.0 and 10.1 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 124742.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-07-21T20:00:00.000Z
CVE-2017-1268 
IBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input. IBM X-Force ID: 124743.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2018-12-13T16:00:00.000Z
CVE-2017-1269 
IBM Security Guardium 10.0 and 10.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 124744
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-07-05T13:00:00.000Z