rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-1677 
IBM Data Server Driver for JDBC and SQLJ (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) deserializes the contents of /tmp/connlicj.bin which leads to object injection and potentially arbitrary code execution depending on the classpath. IBM X-Force ID: 133999.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-03-22T12:00:00.000Z
CVE-2017-1678 
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134000.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational DOORS Next Generation
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1679 
IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: OpenPages GRC Platform
Published: 2018-09-10T14:00:00.000Z
CVE-2017-1681 
IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) could allow a local attacker to obtain sensitive information, caused by improper handling of application requests, which could allow unauthorized access to read a file. IBM X-Force ID: 134003.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Liberty for Java for Bluemix
Published: 2018-01-11T17:00:00.000Z
CVE-2017-1682 
IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134004.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Connections
Published: 2018-02-14T15:00:00.000Z
CVE-2017-1683 
IBM Connections Engagement Center 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134005.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Connections
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1688 
IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134063.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1689 
IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134064.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1690 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134065.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Quality Manager
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1691 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134066.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1692 
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM X-Force ID: 134067.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: AIX
Published: 2018-02-07T17:00:00.000Z
CVE-2017-1693 
IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Integration Bus
Published: 2018-01-19T14:00:00.000Z
CVE-2017-1694 
IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Integration Bus
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1695 
IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134177.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2019-02-15T20:00:00.000Z
CVE-2017-1696 
IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 134178.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1698 
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system. IBM X-Force ID: 124390.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Portal
Published: 2017-12-27T16:00:00.000Z
CVE-2017-1699 
IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: MQ
Published: 2018-01-04T17:00:00.000Z
CVE-2017-1700 
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) could allow an authenticated user to cause a denial of service due to incorrect authorization for resource intensive scenarios. IBM X-Force ID: 134392.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Rhapsody Design Manager
Published: 2018-04-24T14:00:00.000Z
CVE-2017-1701 
IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 134393.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Team Concert
Published: 2018-04-23T13:00:00.000Z
CVE-2017-1705 
IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this information is not visible at first it can be obtained by viewing the page source. IBM X-Force ID: 134427.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Privileged Identity Manager
Published: 2018-03-30T16:00:00.000Z
CVE-2017-1710 
A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Storwize V7000 (2076)
Published: 2017-11-13T23:00:00.000Z
CVE-2017-1711 
IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory. IBM X-Force ID: 134532.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Client Application Access
vendor: IBM
product: Notes
Published: 2018-02-13T20:00:00.000Z
CVE-2017-1712 
"A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat (ROBOT) attack. An attacker could iteratively query a server running a vulnerable TLS stack implementation to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions."
Problem types: description: "Return of Bleichenbacher's Oracle Threat (ROBOT)"
Affected products: vendor: n/a
product: "HCL Domino"
Published: 2020-07-01T13:47:50.000Z
CVE-2017-1713 
IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134632.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Streams
Published: 2019-03-21T14:35:28.015Z
CVE-2017-1714 
IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege. IBM X-Force ID: 134633.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Client Application Access
vendor: IBM
product: Notes
Published: 2018-02-13T20:00:00.000Z
CVE-2017-1715 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134637.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Quality Manager
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1716 
IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to improper permission settings. IBM X-Force ID: 134638.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Tivoli Workload Scheduler
Published: 2017-12-13T18:00:00.000Z
CVE-2017-1717 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134796.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1720 
IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared memory IPC. IBM X-Force ID: 134807.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Client Application Access
vendor: IBM
product: Notes
Published: 2018-02-13T20:00:00.000Z
CVE-2017-1721 
IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2018-04-26T14:00:00.000Z
CVE-2017-1722 
IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 134811.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2018-04-26T14:00:00.000Z
CVE-2017-1723 
IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 134812.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2018-04-26T14:00:00.000Z
CVE-2017-1724 
IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134814.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2018-04-26T14:00:00.000Z
CVE-2017-1725 
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) contain an undisclosed vulnerability with the potential for information disclosure. IBM X-Force ID: 134820.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational Rhapsody Design Manager
Published: 2018-04-24T14:00:00.000Z
CVE-2017-1727 
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 134869.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2018-01-04T17:00:00.000Z
CVE-2017-1729 
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134909.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-07-10T16:00:00.000Z
CVE-2017-1731 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2018-01-30T18:00:00.000Z
CVE-2017-1732 
IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 134913.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Access Manager for Enterprise Single Sign-On
Published: 2018-08-17T16:00:00.000Z
CVE-2017-1733 
IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 134914.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2018-04-04T18:00:00.000Z
CVE-2017-1734 
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores potentially sensitive information in a cache that could be read by authenticated users. IBM X-Force ID: 134915.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational Software Architect Design Manager
Published: 2018-04-24T14:00:00.000Z
CVE-2017-1738 
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would allow an authenticated user to obtain elevated privileges. IBM X-Force ID: 134919.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-07-10T16:00:00.000Z
CVE-2017-1739 
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134921.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cram Social Program Management
Published: 2018-01-11T17:00:00.000Z
CVE-2017-1740 
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134922.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cram Social Program Management
Published: 2018-01-11T17:00:00.000Z
CVE-2017-1741 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could read files on the file system. IBM X-Force ID: 134931.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2018-03-14T00:00:00.000Z
CVE-2017-1743 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could browse the file system. IBM X-Force ID: 134933.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2018-05-04T14:00:00.000Z
CVE-2017-1746 
IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Tivoli Components
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1747 
A specially crafted message could cause a denial of service in IBM WebSphere MQ 9.0, 9.0.0.1, 9.0.0.2, 9.0.1, 9.0.2, 9.0.3, and 9.0.4 applications consuming messages that it needs to perform data conversion on. IBM X-Force ID: 135520.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2018-03-30T16:00:00.000Z
CVE-2017-1748 
IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 135521.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Connections
Published: 2018-06-04T17:00:00.000Z
CVE-2017-1749 
IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on the system. An unauthenticated attacker could alter UCD deployments. IBM X-Force ID: 135522.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: UrbanCode Deploy
Published: 2018-08-13T16:00:00.000Z
CVE-2017-1750 
IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135523.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz Reporting Service
Published: 2018-04-25T13:00:00.000Z
CVE-2017-1751 
IBM Robotic Process Automation with Automation Anywhere 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135546.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Robotic Process Automation with Automation Anywhere
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1752 
IBM UrbanCode Deploy 6.1 and 6.2 could allow an authenticated privileged user to obtain highly sensitive information. IBM X-Force ID: 135547.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: UrbanCode Deploy
Published: 2018-05-25T14:00:00.000Z