rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-1125 
IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cognos Business Intelligence
Published: 2017-06-07T17:00:00.000Z
CVE-2017-1126 
IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks. IBM X-Force ID: 121341.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Integration Bus
Published: 2017-10-03T17:00:00.000Z
CVE-2017-1127 
IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: Rational DOORS Next Generation
Published: 2017-02-08T19:00:00.000Z
CVE-2017-1128 
IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: Rational DOORS Next Generation
Published: 2017-02-08T19:00:00.000Z
CVE-2017-1129 
IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it could cause the Notes client to hang and have to be restarted. IBM X-Force ID: 121370.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Lotus Expeditor
vendor: IBM
product: Notes
Published: 2017-09-05T21:00:00.000Z
CVE-2017-1130 
IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dialog boxes which would cause the client hang and have to be restarted. IBM X-Force ID: 121371.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Notes
Published: 2017-09-05T21:00:00.000Z
CVE-2017-1131 
IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. IBM X-Force ID: 121375.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2017-06-23T16:00:00.000Z
CVE-2017-1132 
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 121418.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2017-06-23T16:00:00.000Z
CVE-2017-1133 
IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: QRadar SIEM
Published: 2017-03-07T17:00:00.000Z
CVE-2017-1134 
IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM Reference #: 1998459.
Problem types: description: Gain Privileges
Affected products: vendor: IBM Corporation
product: Tivoli System Automation for Multiplatforms
Published: 2017-03-20T16:00:00.000Z
CVE-2017-1137 
IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to the admin console. IBM X-Force ID: 121549.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: WebSphere Application Server
Published: 2017-05-10T14:00:00.000Z
CVE-2017-1140 
IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Process Manager Advanced
Published: 2017-06-08T21:00:00.000Z
CVE-2017-1141 
IBM Insights Foundation for Energy 1.0, 1.5, and 1.6 could allow an authenticated user to obtain sensitive information from error messages. IBM X-Force ID: 121907.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: IBM Insights Foundation for Energy
Published: 2017-04-28T17:00:00.000Z
CVE-2017-1142 
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM Reference #: 1998874.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Kenexa LCMS Premier on Cloud
Published: 2017-03-27T22:00:00.000Z
CVE-2017-1143 
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM Reference #: 1998874.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Kenexa LCMS Premier on Cloud
Published: 2017-03-27T22:00:00.000Z
CVE-2017-1144 
IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Integration Bus
Published: 2017-07-05T18:00:00.000Z
CVE-2017-1145 
IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion. IBM Reference #: 1999672.
Problem types: description: Denial of Service
Affected products: vendor: IBM Corporation
product: WebSphere MQ
Published: 2017-03-20T16:00:00.000Z
CVE-2017-1146 
IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999736.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: Content Navigator
Published: 2017-03-20T16:00:00.000Z
CVE-2017-1147 
IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122200.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: OpenPages GRC Platform
Published: 2017-11-01T21:00:00.000Z
CVE-2017-1148 
IBM OpenPages GRC Platform 7.2 and 7.3 with OpenPages Loss Event Entry (LEE) application could allow a user to obtain sensitive information including private APIs that could be used in further attacks against the system. IBM X-Force ID: 122201.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: OpenPages GRC Platform
Published: 2017-11-01T21:00:00.000Z
CVE-2017-1149 
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: UrbanCode Deploy
Published: 2017-04-25T18:00:00.000Z
CVE-2017-1150 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference #: 1999515.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: DB2 for Linux, UNIX and Windows
Published: 2017-03-08T19:00:00.000Z
CVE-2017-1151 
IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293.
Problem types: description: Gain Privileges
Affected products: vendor: IBM Corporation
product: WebSphere Application Server
Published: 2017-03-20T16:00:00.000Z
CVE-2017-1152 
IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Financial Transaction Manager
Published: 2017-04-14T16:00:00.000Z
CVE-2017-1153 
IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do not have access to. IBM Reference #: 1999563.
Problem types: description: Gain Privileges
Affected products: vendor: IBM Corporation
product: TRIRIGA Application Platform
Published: 2017-03-27T22:00:00.000Z
CVE-2017-1154 
IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference #: 1999892.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Algo One
Published: 2017-03-31T18:00:00.000Z
CVE-2017-1155 
IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference #: 1999754.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Algo One
Published: 2017-03-20T16:00:00.000Z
CVE-2017-1156 
IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force. ID: 122592
Problem types: description: Gain Access
Affected products: vendor: IBM Corporation
product: WebSphere Portal
Published: 2017-05-05T19:00:00.000Z
CVE-2017-1157 
IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be restricted to authorized users. IBM X-Force ID: 122788.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Jazz Reporting Service
Published: 2017-07-05T18:00:00.000Z
CVE-2017-1159 
IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 122891.
Problem types: description: Gain Access
Affected products: vendor: IBM Corporation
product: Business Process Manager Advanced
Published: 2017-05-22T20:00:00.000Z
CVE-2017-1160 
IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122892.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: Financial Transaction Manager
Published: 2017-04-17T21:00:00.000Z
CVE-2017-1161 
IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. By crafting a malicious URL, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the privileges of the www-data user. IBM X-Force ID: 122956.
Problem types: description: Gain Access
Affected products: vendor: IBM Corporation
product: API Connect
Published: 2017-04-17T21:00:00.000Z
CVE-2017-1162 
IBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 122957.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2017-09-12T21:00:00.000Z
CVE-2017-1164 
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-25T12:00:00.000Z
CVE-2017-1168 
IBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123187.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Engineering Lifecycle Manager
Published: 2017-08-10T15:00:00.000Z
CVE-2017-1169 
IBM DOORS next Generation (DNG/RRC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2017-10-25T12:00:00.000Z
CVE-2017-1170 
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230.
Problem types: description: Gain Access
Affected products: vendor: IBM Corporation
product: WebSphere Commerce Enterprise
Published: 2017-04-26T17:00:00.000Z
CVE-2017-1171 
The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference #: 2001083.
Problem types: description: Gain Privileges
Affected products: vendor: IBM Corporation
product: TRIRIGA Application Platform
Published: 2017-03-31T18:00:00.000Z
CVE-2017-1174 
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2017-08-10T15:00:00.000Z
CVE-2017-1175 
IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123297.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2017-07-05T17:00:00.000Z
CVE-2017-1176 
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM X-Force ID: 123299.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2017-07-05T17:00:00.000Z
CVE-2017-1177 
IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Compliance
Published: 2019-02-05T18:00:00.000Z
CVE-2017-1178 
IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123430.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Endpoint Manager for Security and Compliance
Published: 2017-06-07T17:00:00.000Z
CVE-2017-1179 
IBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123431.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Compliance Analytics
Published: 2017-06-08T21:00:00.000Z
CVE-2017-1180 
The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference #: 2001084.
Problem types: description: Gain Privileges
Affected products: vendor: IBM Corporation
product: TRIRIGA Application Platform
Published: 2017-04-05T18:00:00.000Z
CVE-2017-1181 
IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Tivoli Monitoring V6
Published: 2017-07-14T13:00:00.000Z
CVE-2017-1182 
IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Tivoli Monitoring V6
Published: 2017-07-14T13:00:00.000Z
CVE-2017-1183 
IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default client-server communications, HTTP, are being used. IBM X-Force ID: 123494.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Tivoli Monitoring V6
Published: 2017-07-14T13:00:00.000Z
CVE-2017-1189 
IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123558.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T16:00:00.000Z
CVE-2017-1190 
IBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with special access roles to execute arbitrary code on the system. By manipulating a configurable property, an attacker could exploit this vulnerability to gain full control over the system. IBM X-Force ID: 123559.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Emptoris Strategic Supply Management
Published: 2017-08-14T22:00:00.000Z
CVE-2017-1191 
An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2017-12-27T16:00:00.000Z
CVE-2017-1192 
IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2017-08-10T15:00:00.000Z
CVE-2017-1193 
IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET request. IBM X-Force ID: 123667.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2017-06-23T16:00:00.000Z
CVE-2017-1194 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123669.
Problem types: description: Gain Access
Affected products: vendor: IBM Corporation
product: IBM WebSphere Application Server
Published: 2017-04-28T17:00:00.000Z
CVE-2017-1195 
IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123670.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cram Social Program Management
Published: 2017-08-29T21:00:00.000Z
CVE-2017-1196 
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Endpoint Manager for Security and Compliance
Published: 2017-06-07T17:00:00.000Z
CVE-2017-1197 
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 123672.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Compliance Analytics
Published: 2017-06-15T13:00:00.000Z
CVE-2017-1198 
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Compliance
Published: 2019-02-05T18:00:00.000Z