rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-4001 
Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code.
Problem types: description: Electron App Command Line Argument Misconfiguration
Affected products: vendor: n/a
product: Druva inSync Client
Published: 2020-03-24T21:04:36.000Z
CVE-2019-4008 
API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in some URLs can result in the tokens being written to log files. IBM X-Force ID: 155626.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: API Connect
Published: 2019-02-07T16:00:00.000Z
CVE-2019-4011 
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155885.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: BigFix Platform
Published: 2019-05-20T17:25:23.378Z
CVE-2019-4012 
IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: BigFix WebUI Profile Management
vendor: IBM
product: BigFix WebUI Software Distribution
Published: 2019-04-15T14:55:26.514Z
CVE-2019-4013 
IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: BigFix Platform
Published: 2019-04-10T14:30:27.523Z
CVE-2019-4014 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 155892.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2
vendor: IBM
product: Db2
Published: 2019-04-03T13:50:29.652Z
CVE-2019-4015 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 155893.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2019-03-11T22:00:00.000Z
CVE-2019-4016 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 155894.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2019-03-11T22:00:00.000Z
CVE-2019-4027 
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 155905.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-03-05T18:00:00.000Z
CVE-2019-4028 
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155906.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-03-05T18:00:00.000Z
CVE-2019-4029 
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 155907.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-03-05T18:00:00.000Z
CVE-2019-4030 
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155946.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2019-03-06T20:00:00.000Z
CVE-2019-4031 
IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to write files as root in the file system, which could allow the attacker to gain root privileges. IBM X-Force ID: 155997.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Workload Scheduler Distributed
Published: 2019-10-16T12:45:17.911Z
CVE-2019-4032 
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-ForceID: 155998.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Financial Transaction Manager
Published: 2019-03-05T18:00:00.000Z
CVE-2019-4033 
IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155999.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Content Navigator
Published: 2019-04-25T14:36:43.418Z
CVE-2019-4034 
IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation. When editing an executable file in ICN with Edit service, it will be executed on the user's workstation. IBM X-Force ID: 156000.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Content Navigator
Published: 2019-03-14T23:00:00.000Z
CVE-2019-4035 
IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If attackers make a fake IBM Content Navigator site, they can send a link to ICN users to send request to their Edit client directly. Then Edit client will download documents from the fake ICN website. IBM X-Force ID: 156001.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Content Navigator
Published: 2019-03-22T18:50:21.369Z
CVE-2019-4036 
IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse proxy component. IBM X-Force ID: 156159.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Security Access Manager
default_status: affected
Published: 2019-10-25T16:30:34.688Z
CVE-2019-4038 
IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness can result in a limited form of code injection. IBM X-Force ID: 156162.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Identity Manager
Published: 2019-02-04T21:00:00.000Z
CVE-2019-4039 
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the error log reporting system. IBM X-Force ID: 156163.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2019-05-23T14:05:15.446Z
CVE-2019-4040 
IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 156164.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: i
Published: 2019-01-31T16:00:00.000Z
CVE-2019-4043 
IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-04-02T13:20:33.975Z
CVE-2019-4045 
IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a missing restriction in an API, a client might spoof the last modified by value of a document. IBM X-Force ID: 156241.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Business Automation Workflow
Published: 2019-04-08T14:50:38.084Z
CVE-2019-4046 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by improper handling of request headers. A remote attacker could exploit this vulnerability to cause the consumption of Memory. IBM X-Force ID: 156242.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2019-03-25T18:15:16.964Z
CVE-2019-4047 
IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution. IBM X-Force ID: 156243.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Jazz Reporting Service
Published: 2019-04-29T16:35:17.708Z
CVE-2019-4048 
IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a previous user of the same machine. IBM X-Force ID: 156311.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2019-06-06T00:35:18.759Z
CVE-2019-4049 
IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space of the underlying filesystem using the error logging service. IBM X-Force ID: 156398.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2019-08-20T18:25:26.381Z
CVE-2019-4051 
Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID: 156542.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: API Connect
Published: 2019-04-08T14:50:38.126Z
CVE-2019-4052 
IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users. IBM X-Force ID: 156544.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: API Connect
Published: 2019-03-22T18:50:21.417Z
CVE-2019-4054 
IBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further attacks against the system. IBM X-Force ID: 156563.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2019-07-17T14:05:20.897Z
CVE-2019-4055 
IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable to a denial of service attack within the TLS key renegotiation function. IBM X-Force ID: 156564.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2019-04-19T16:20:15.989Z
CVE-2019-4056 
IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files. IBM X-Force ID: 156565.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2019-06-06T00:35:18.806Z
CVE-2019-4057 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB2 instance account to leverage a fenced execution process to execute arbitrary code as root. IBM X-Force ID: 156567.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2019-07-01T15:05:37.482Z
CVE-2019-4058 
IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normally restricted to administrators. IBM X-Force ID: 156570.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: BigFix Platform
Published: 2019-05-20T17:25:23.427Z
CVE-2019-4059 
IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unauthorized access to the document database. IBM X-Force ID: 156583.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational ClearCase
Published: 2019-02-15T20:00:00.000Z
CVE-2019-4061 
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Platform
Published: 2019-02-27T22:00:00.000Z
CVE-2019-4062 
IBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 157007.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: i2 Analyst's Notebook
Published: 2019-07-30T13:25:14.836Z
CVE-2019-4063 
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-03-05T18:00:00.000Z
CVE-2019-4066 
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to create arbitrary users which could cause ID management issues and result in code execution. IBM X-Force ID: 157011.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Intelligent Operations Center
Published: 2019-06-07T14:40:19.505Z
CVE-2019-4067 
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 157012.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Intelligent Operations Center
Published: 2019-06-07T14:40:19.556Z
CVE-2019-4068 
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration, allowing an attacker to brute force into the system. IBM X-Force ID: 157013.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Intelligent Operations Center
Published: 2019-06-07T14:40:19.598Z
CVE-2019-4069 
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker to upload malicious content. IBM X-Force ID: 157014.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Intelligent Operations Center
Published: 2019-06-07T14:40:19.638Z
CVE-2019-4070 
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157015.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Intelligent Operations Center
Published: 2019-06-07T14:40:19.677Z
CVE-2019-4071 
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 157063.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Control Standard Edition
Published: 2019-05-09T15:10:15.559Z
CVE-2019-4072 
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out. Utilizing the application back button users can remain logged in as the current user for a short period of time, therefore users are presented with information for Spectrum Control Application. IBM X-Force ID: 157064.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Control Standard Edition
Published: 2019-05-09T15:10:15.606Z
CVE-2019-4073 
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157107.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-04-25T14:36:43.460Z
CVE-2019-4074 
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157108.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-04-25T14:36:43.502Z
CVE-2019-4075 
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157109.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-04-25T14:36:43.541Z
CVE-2019-4076 
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157110.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-04-25T14:36:43.579Z
CVE-2019-4077 
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157111.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-04-25T14:36:43.622Z
CVE-2019-4078 
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrator due to incorrect permissions set on MQ installation directories. IBM X-Force ID: 157190.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: MQ
Published: 2019-05-23T14:05:15.498Z
CVE-2019-4080 
IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2019-04-02T13:20:34.027Z
CVE-2019-4083 
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157383.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2019-06-27T13:45:29.751Z
CVE-2019-4084 
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2019-06-27T13:45:29.805Z
CVE-2019-4086 
IBM Cloud Application Performance Management 8.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 157509.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cloud Application Performance Management
Published: 2019-09-17T19:05:23.642Z
CVE-2019-4087 
IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and storage agents in response to specifically crafted communication exchanges. By sending an overly long request, a remote attacker could overflow a buffer and execute arbitrary code on the system with instance id privileges or cause the server or storage agent to crash. IBM X-Force ID: 157510.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum Protect
Published: 2019-07-02T15:05:22.960Z
CVE-2019-4088 
IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a specially crafted library loaded by the dsmqsan module. By setting up such a library, a local attacker could exploit this vulnerability to gain root privileges on the vulnerable system. IBM X-Force ID: 157511.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum Protect
Published: 2019-07-02T15:05:23.048Z
CVE-2019-4090 
"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field."
Problem types: description: "Cross-site scripting"
Affected products: vendor: n/a
product: "HCL Campaign"
Published: 2020-07-17T19:09:36.000Z