rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-5902 
IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: IBM Maximo Asset Management 6.2, 7.1, 7.5, 7.5.0.0, 7.5.0.10, 7.1.0.0, 6.2.0.0, 7.2, 7.1.1, 7.1.2, 7.2.1, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 7.1.1.1, 7.1.1.10, 7.1.1.11, 7.1.1.12, 7.1.1.2, 7.1.1.5, 7.1.1.6, 7.1.1.7, 7.1.1.8, 7.1.1.9, 7.5.0.1, 7.5.0.2, 7.5.0.3, 7.5.0.4, 7.5.0.5, 7.6, 7.5.0, 7.6.0
Published: 2017-02-08T22:00:00.000Z
CVE-2016-5905 
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-30T11:00:00.000Z
CVE-2016-5918 
IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt and the password is changed.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Tivoli Storage Manager HSM for Windows
Published: 2017-02-08T22:00:00.000Z
CVE-2016-5919 
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM Reference #: 1996868.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Access Manager
Published: 2017-02-16T20:00:00.000Z
CVE-2016-5920 
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-29T01:00:00.000Z
CVE-2016-5927 
IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T10:00:00.000Z
CVE-2016-5932 
IBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998294.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: Connections
Published: 2017-03-01T21:00:00.000Z
CVE-2016-5933 
IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference #: 1997223.
Problem types: description: Gain Access
Affected products: vendor: IBM Corporation
product: Tivoli Monitoring V6
Published: 2017-03-08T19:00:00.000Z
CVE-2016-5934 
IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. By placing a specially-crafted DLL in the victim's path, an attacker could exploit this vulnerability when the installer is executed to run arbitrary code on the system with privileges of the victim.
Problem types: description: Gain Access
Affected products: vendor: IBM Corporation
product: Tivoli Storage Manager FastBack
Published: 2017-02-08T22:00:00.000Z
CVE-2016-5935 
IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Tivoli Components
Published: 2017-02-02T22:00:00.000Z
CVE-2016-5937 
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Problem types: description: Gain Access
Affected products: vendor: IBM Corporation
product: Kenexa LCMS Premier on Cloud
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5938 
IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Kenexa LMS on Cloud
Published: 2017-02-01T22:00:00.000Z
CVE-2016-5939 
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Problem types: description: Data Manipulation
Affected products: vendor: IBM Corporation
product: Kenexa LMS on Cloud
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5940 
IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: Kenexa LMS on Cloud
Published: 2017-02-01T22:00:00.000Z
CVE-2016-5941 
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Kenexa LMS on Cloud
Published: 2017-02-01T22:00:00.000Z
CVE-2016-5942 
IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: Kenexa LMS on Cloud
Published: 2017-02-01T22:00:00.000Z
CVE-2016-5943 
IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5944 
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5945 
IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5946 
Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5947 
IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5948 
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: Kenexa LCMS Premier on Cloud
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5949 
IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data with a specially crafted HTTP request.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Kenexa LCMS Premier on Cloud
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5950 
IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Kenexa LCMS Premier on Cloud
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5951 
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: Kenexa LCMS Premier on Cloud
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5952 
IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Problem types: description: Data Manipulation
Affected products: vendor: IBM Corporation
product: Kenexa LCMS Premier on Cloud
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5953 
IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Sterling Order Management
Published: 2017-02-01T22:00:00.000Z
CVE-2016-5954 
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote authenticated users to cause a denial of service by uploading temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T10:00:00.000Z
CVE-2016-5955 
Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 6.0.2 before iFix004 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-25T03:38:00.000Z
CVE-2016-5957 
IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive information by leveraging a weak algorithm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5958 
IBM Security Privileged Identity Manager could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Privileged Identity Manager
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5959 
IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 116136.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Privileged Identity Manager
Published: 2017-06-07T17:00:00.000Z
CVE-2016-5960 
IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 116171.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Privileged Identity Manager
Published: 2017-06-07T17:00:00.000Z
CVE-2016-5963 
IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5964 
IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Privileged Identity Manager
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5966 
IBM Security Privileged Identity Manager Virtual Appliance could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Privileged Identity Manager
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5967 
The installation component in IBM Rational Asset Analyzer (RAA) 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-25T03:38:00.000Z
CVE-2016-5968 
The Replay Server in IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224 FP3 allows remote attackers to conduct SSRF attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-25T03:38:00.000Z
CVE-2016-5970 
Directory traversal vulnerability in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5971 
IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5972 
IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 uses weak permissions for unspecified resources, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5974 
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5975 
Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-5978.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5976 
The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to discover component passwords via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5977 
Open redirect vulnerability in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5978 
Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-5975.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-26T01:00:00.000Z
CVE-2016-5979 
IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates, that results in the new instance not accessible for the intended user. IBM X-Force ID: 116379.
Problem types: description: Denial of Service
Affected products: vendor: IBM Corporation
product: Distributed Marketing
Published: 2017-05-15T21:00:00.000Z
CVE-2016-5980 
IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: TRIRIGA Application Platform
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5981 
Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace (Application Engine) through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-25T03:38:00.000Z
CVE-2016-5983 
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T10:00:00.000Z
CVE-2016-5984 
IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM Corporation
product: InfoSphere Information Server
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5985 
The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash.
Problem types: description: Gain Privileges
Affected products: vendor: IBM Corporation
product: Tivoli Storage Manager
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5986 
IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-01T01:00:00.000Z
CVE-2016-5987 
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-30T11:00:00.000Z
CVE-2016-5988 
IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: Privileged Identity Manager
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5990 
IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically executed by the server.
Problem types: description: Gain Access
Affected products: vendor: IBM Corporation
product: Privileged Identity Manager
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5991 
IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-25T03:38:00.000Z
CVE-2016-5992 
IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-25T03:38:00.000Z
CVE-2016-5994 
IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: InfoSphere Information Server
Published: 2017-02-01T20:00:00.000Z
CVE-2016-5995 
Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-01T01:00:00.000Z