rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-4765 
IBM Cloud Pak for Multicloud Management prior to 2.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 188902.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cloud Pak for Multicloud Management
Published: 2021-05-19T19:40:20.459Z
CVE-2020-4766 
IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which would consume all available resources. IBM X-Force ID: 188093.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ Internet Pass-Thru
Published: 2021-01-22T16:50:13.674Z
CVE-2020-4767 
IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read. Bysending a specially crafted request, the attacker could cause the application to crash. IBM X-Force ID: 188906.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Sterling Connect Direct for Microsoft Windows
Published: 2020-10-28T16:15:19.451Z
CVE-2020-4768 
IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188907.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Automation Workflow
vendor: IBM
product: Case Manager
Published: 2021-02-11T16:30:28.795Z
CVE-2020-4771 
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication of a websocket endpoint. By using known tools to subscribe to the websocket event stream, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 188993.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Operations Center
Published: 2020-11-23T16:55:19.824Z
CVE-2020-4772 
An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this vulnerability to expose sensitive information, denial of service, server side request forgery or consume memory resources. IBM X-Force ID: 189150.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Curam SPM
Published: 2020-10-12T13:05:36.161Z
CVE-2020-4773 
A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted actions on the web application while they are currently authenticated. This applies to a single server class only, with no impact to remainder of web application. IBM X-Force ID: 189151.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Curam SPM
Published: 2020-10-12T13:05:36.650Z
CVE-2020-4774 
An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information such as XML document structure and content. IBM X-Force ID: 189152.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Curam SPM
Published: 2020-10-12T13:05:37.095Z
CVE-2020-4775 
A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restricted to a single location. IBM X-Force ID: 189153.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Curam SPM
Published: 2020-10-12T13:05:37.530Z
CVE-2020-4776 
A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted file path in URL request to view arbitrary files on the system. IBM X-Force ID: 189154.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Curam SPM
Published: 2020-10-12T13:05:37.983Z
CVE-2020-4778 
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the CÃºram application. IBM X-Force ID: 189156.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Curam SPM
Published: 2020-10-12T13:05:38.522Z
CVE-2020-4779 
A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass security access controls. IBM X-Force ID: 189156.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Curam SPM
Published: 2020-10-12T13:05:38.969Z
CVE-2020-4780 
OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Curam SPM
Published: 2020-10-12T13:05:39.409Z
CVE-2020-4781 
An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service. IBM X-Force ID: 189159.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Curam SPM
Published: 2020-10-12T13:05:39.850Z
CVE-2020-4782 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2020-10-28T16:15:19.877Z
CVE-2020-4783 
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 189214.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-11-23T16:55:20.269Z
CVE-2020-4785 
IBM App Connect Enterprise Certified Container 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 189219.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: App Connect Enterprise Certified Container
Published: 2020-11-03T13:25:21.789Z
CVE-2020-4786 
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189221.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2021-01-27T16:35:32.209Z
CVE-2020-4787 
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189224.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2021-01-27T16:35:32.845Z
CVE-2020-4788 
IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: VIOS
vendor: IBM
product: AIX
Published: 2020-11-20T03:45:13.599Z
CVE-2020-4789 
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 189302.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2021-01-27T16:35:33.500Z
CVE-2020-4790 
IBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of service due to improperly validating a supplied URL, rendering the application unusuable. IBM X-Force ID: 189375.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2021-02-09T14:50:21.747Z
CVE-2020-4791 
IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using main in the middle attacks due to improper certificate validation. IBM X-Force ID: 189379.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2021-02-09T14:50:22.418Z
CVE-2020-4792 
IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 189441.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Edge
Published: 2021-04-05T16:20:16.525Z
CVE-2020-4794 
IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Automation Workstream Services
vendor: IBM
product: Business Process Manager
vendor: IBM
product: Business Automation Workflow
Published: 2020-12-21T17:50:30.680Z
CVE-2020-4795 
IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user using a specially crafted HTTP request. IBM X-Force ID: 189446.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2021-02-09T14:50:23.023Z
CVE-2020-4799 
IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBM X-Force ID: 189460.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Informix Dynamic Server
Published: 2020-10-08T13:20:17.028Z
CVE-2020-4803 
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Edge
Published: 2021-09-23T16:05:25.785Z
CVE-2020-4805 
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189539.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Edge
Published: 2021-09-23T16:05:27.376Z
CVE-2020-4809 
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Edge
Published: 2021-09-23T16:05:28.999Z
CVE-2020-4811 
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious data using a specially crafted HTTP request due to improper input validation.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Cloud Pak for Security
Published: 2021-05-14T16:15:33.861Z
CVE-2020-4815 
IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive information from HTTP response headers that could be used in further attacks against the system.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cloud Pak for Security
Published: 2021-01-27T13:05:26.062Z
CVE-2020-4816 
IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 189703.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cloud Pak for Security
Published: 2021-01-27T13:05:26.688Z
CVE-2020-4820 
IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cloud Pak for Security
Published: 2021-01-27T13:05:27.317Z
CVE-2020-4821 
IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: InfoSphere Change Data Capture for z/OS
vendor: IBM
product: InfoSphere Data Replication
Published: 2021-07-16T16:50:24.014Z
CVE-2020-4825 
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 189839.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: API Connect
Published: 2021-02-04T16:55:37.759Z
CVE-2020-4826 
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 189840.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: API Connect
Published: 2021-02-04T16:55:38.478Z
CVE-2020-4827 
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 189841.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: API Connect
Published: 2021-02-04T16:55:39.106Z
CVE-2020-4828 
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 189842.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: API Connect
Published: 2021-02-04T16:55:39.721Z
CVE-2020-4829 
IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the ksu user command to gain root privileges. IBM X-Force ID: 189960.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: VIOS
vendor: IBM
product: AIX
Published: 2020-12-10T22:11:07.430Z
CVE-2020-4831 
IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 189965.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2021-03-12T16:40:15.499Z
CVE-2020-4832 
IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. IBM X-Force ID: 189969.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: PowerHA
Published: 2021-02-05T14:25:12.967Z
CVE-2020-4838 
IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190036.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: API Connect
Published: 2021-01-12T14:45:26.797Z
CVE-2020-4839 
IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: 8335-GTB
vendor: IBM
product: 8335-GTA
vendor: IBM
product: 8335-GCA
Published: 2021-05-25T16:00:16.559Z
CVE-2020-4840 
IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 190044.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Secret Server
Published: 2020-12-21T18:05:24.053Z
CVE-2020-4841 
IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 190045.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Secret Server
Published: 2020-12-21T18:05:24.718Z
CVE-2020-4842 
IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190046.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Secret Server
Published: 2020-12-21T18:05:25.357Z
CVE-2020-4843 
IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authenticated user. IBM X-Force ID: 190048.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Secret Server
Published: 2020-12-21T18:05:26.001Z
CVE-2020-4845 
IBM Security Key Lifecycle Manager 3.0.1 and 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190289.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2020-12-17T18:40:18.798Z
CVE-2020-4846 
IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190290.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2020-12-17T18:40:19.493Z
CVE-2020-4848 
IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow an authenticated user to initiate a plugin or compare process resources that they should not have access to. IBM X-Force ID: 190293.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: UrbanCode Deploy
Published: 2021-03-30T16:00:25.825Z
CVE-2020-4849 
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 190294.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Tivoli Netcool Impact
Published: 2020-12-15T14:45:22.525Z
CVE-2020-4850 
IBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote attacker to obtain sensitive information, caused by the leftover files after configuration. IBM X-Force ID: 190298.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2021-05-20T15:10:28.799Z
CVE-2020-4851 
IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2021-03-16T13:55:15.581Z
CVE-2020-4854 
IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 190454.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-11-23T16:55:20.752Z
CVE-2020-4855 
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190457.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Engineering Lifecycle Optimization
vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Engineering Test Management
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Engineering Workflow Management
vendor: IBM
product: Rational Rhapsody Model Manager
Published: 2021-01-27T16:15:27.177Z