rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-1493 
IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: UrbanCode Deploy
Published: 2018-01-09T20:00:00.000Z
CVE-2017-1494 
IBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128692.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Process Manager Advanced
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1495 
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2017-08-02T17:00:00.000Z
CVE-2017-1496 
IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128694.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2017-07-31T21:00:00.000Z
CVE-2017-1497 
IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling File Gateway
Published: 2017-12-07T15:00:00.000Z
CVE-2017-1498 
IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129020.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Connections
Published: 2017-12-07T15:00:00.000Z
CVE-2017-1499 
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 129106.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2018-02-14T15:00:00.000Z
CVE-2017-1500 
A Reflected Cross Site Scripting (XSS) vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framework 6.1, 6.2, 6.3, 7.0, 7.1, and 8.0. The vulnerable parameter is "scope"; if you set as its value a "realm" not defined in authenticationConfig.xml, you get an HTTP 403 Forbidden response and the value will be reflected in the body of the HTTP response. By setting it to arbitrary JavaScript code it is possible to modify the flow of the authorization function, potentially leading to credential disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Worklight
Published: 2017-08-01T18:00:00.000Z
CVE-2017-1501 
IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the web services security bindings settings. IBM X-Force ID: 129576.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2017-08-18T15:00:00.000Z
CVE-2017-1502 
IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129577.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T16:00:00.000Z
CVE-2017-1503 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 129578.
Problem types: description: XSS
Affected products: vendor: IBM
product: IBM WebSphere Application Server
Published: 2017-10-10T21:00:00.000Z
CVE-2017-1504 
IBM WebSphere Application Server version 9.0.0.4 could provide weaker than expected security after using the PasswordUtil command to enable AES password encryption. IBM X-Force ID: 129579.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2017-08-03T15:00:00.000Z
CVE-2017-1506 
IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129617.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cognos TM1
Published: 2018-01-26T21:00:00.000Z
CVE-2017-1507 
IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1508 
IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Informix Servers
Published: 2017-09-13T18:00:00.000Z
CVE-2017-1509 
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Quality Manager
Published: 2018-07-06T14:00:00.000Z
CVE-2017-1515 
IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational DOORS
Published: 2018-01-26T21:00:00.000Z
CVE-2017-1516 
IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Rational DOORS
Published: 2018-01-26T21:00:00.000Z
CVE-2017-1519 
IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2 Connect Server setup with a particular configuration. IBM X-Force ID: 129829.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2017-09-12T21:00:00.000Z
CVE-2017-1520 
IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830.
Problem types: description: Configuration
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2017-09-12T21:00:00.000Z
CVE-2017-1521 
IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129831.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T21:00:00.000Z
CVE-2017-1522 
IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129832.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Content Navigator
Published: 2017-10-05T17:00:00.000Z
CVE-2017-1523 
IBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized user to download reports without authentication. IBM X-Force ID: 129892.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T21:00:00.000Z
CVE-2017-1524 
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-03-23T19:00:00.000Z
CVE-2017-1527 
IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Business Process Manager Advanced
Published: 2017-09-26T17:00:00.000Z
CVE-2017-1530 
IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130409.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Process Manager Advanced
Published: 2017-09-26T17:00:00.000Z
CVE-2017-1531 
IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130410.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Process Manager Advanced
Published: 2017-09-26T17:00:00.000Z
CVE-2017-1532 
IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130411.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS
Published: 2018-01-26T21:00:00.000Z
CVE-2017-1533 
IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130675.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Access Manager
Published: 2018-01-10T17:00:00.000Z
CVE-2017-1534 
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 130676.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Access Manager
Published: 2018-01-10T17:00:00.000Z
CVE-2017-1535 
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130677.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2017-08-29T21:00:00.000Z
CVE-2017-1536 
IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130733.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Portal
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1538 
IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735.
Problem types: description: other
Affected products: vendor: IBM
product: IBM Financial Transaction Manager
Published: 2017-10-10T21:00:00.000Z
CVE-2017-1539 
IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships. By manipulating LDAP group membership an attack might gain privileged access. IBM X-Force ID: 130807.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Business Process Manager Advanced
Published: 2017-09-26T17:00:00.000Z
CVE-2017-1540 
IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS
Published: 2018-01-26T21:00:00.000Z
CVE-2017-1541 
A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: AIX
Published: 2017-10-03T17:00:00.000Z
CVE-2017-1544 
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passwords in browsers that could be used by a local attacker to obtain sensitive information. IBM X-Force ID: 130812.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling File Gateway
Published: 2018-07-20T16:00:00.000Z
CVE-2017-1545 
IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Rational DOORS
Published: 2018-01-26T21:00:00.000Z
CVE-2017-1546 
IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130915.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational DOORS Next Generation
Published: 2017-12-13T18:00:00.000Z
CVE-2017-1548 
IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 131288.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling File Gateway
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1549 
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131289.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling File Gateway
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1550 
IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Sterling File Gateway
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1551 
IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 131291.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: API Connect
Published: 2017-09-25T16:00:00.000Z
CVE-2017-1552 
IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 131396.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: BigInsights
Published: 2017-11-01T21:00:00.000Z
CVE-2017-1553 
IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131397.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: BigInsights
Published: 2017-11-01T21:00:00.000Z
CVE-2017-1554 
IBM Infosphere BigInsights 4.2.0 and 4.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 131398.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: BigInsights
Published: 2017-11-01T21:00:00.000Z
CVE-2017-1555 
IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: API Connect
Published: 2017-09-25T16:00:00.000Z
CVE-2017-1556 
IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated attacker to use a regex and cause the system to slow or hang. IBM X-Force ID: 131546.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: API Connect
Published: 2017-09-13T18:00:00.000Z
CVE-2017-1557 
IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user with authority to send a specially crafted request that could cause a channel process to cease processing further requests. IBM X-Force ID: 131547.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2018-01-02T17:00:00.000Z
CVE-2017-1558 
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 131548.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2017-12-13T18:00:00.000Z
CVE-2017-1559 
Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational Quality Manager
Published: 2018-07-06T14:00:00.000Z
CVE-2017-1560 
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131759.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational DOORS Next Generation
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1561 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131760.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1562 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131761.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1563 
IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS
Published: 2018-01-26T21:00:00.000Z