rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-4396 
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 179359.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Rhapsody Design Manager
Published: 2020-08-04T16:00:25.090Z
CVE-2020-4397 
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID: 179428.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Verify Gateway (IVG)
Published: 2020-07-22T20:30:36.348Z
CVE-2020-4399 
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against the server. IBM X-Force ID: 179476.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Verify Gateway (IVG)
Published: 2020-07-22T20:30:36.825Z
CVE-2020-4400 
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 179478.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Verify Gateway (IVG)
Published: 2020-07-22T20:30:37.302Z
CVE-2020-4405 
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Verify Gateway (IVG)
Published: 2020-07-27T13:31:23.978Z
CVE-2020-4406 
IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 179488.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Protect Client (Linux and Windows)
vendor: IBM
product: Spectrum Protect Client (AIX)
vendor: IBM
product: Spectrum Protect for Space Management (AIX)
vendor: IBM
product: Spectrum Protect for Space Management (Linux)
Published: 2020-06-15T13:25:25.338Z
CVE-2020-4408 
The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which could be obtained by a physical attacker nearby. IBM X-Force ID: 179536.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Qradar Advisor
Published: 2020-07-27T13:31:24.390Z
CVE-2020-4409 
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 179537.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2020-09-16T15:55:14.429Z
CVE-2020-4410 
IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to. IBM X-Force ID: 179539.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Rhapsody Design Manager
Published: 2020-08-04T16:00:25.516Z
CVE-2020-4411 
The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of service condition on the affected system. To exploit this vulnerability, a local attacker could invoke a subset of ioctls on the Spectrum Scale device with non-valid arguments. This could allow the attacker to crash the kernel. IBM X-Force ID: 179986.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2020-05-19T13:15:19.755Z
CVE-2020-4412 
The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster and the availability of file systems managed by Spectrum Scale. IBM X-Force ID: 179987.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2020-05-19T13:15:20.199Z
CVE-2020-4413 
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 179988.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Secret Server
Published: 2020-06-24T14:10:23.029Z
CVE-2020-4414 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service. IBM X-Force ID: 179989.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: DB2 for Linux- UNIX and Windows
Published: 2020-07-01T14:25:33.201Z
CVE-2020-4415 
IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker to execute arbitrary code on the system with the privileges of an administrator or user associated with the Spectrum Protect server or cause the Spectrum Protect server to crash. IBM X-Force ID: 179990.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Protect
Published: 2020-04-23T13:10:24.859Z
CVE-2020-4419 
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 180071.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz Reporting Service
Published: 2020-05-28T14:45:38.149Z
CVE-2020-4420 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DB2 for Linux- UNIX and Windows
Published: 2020-07-01T14:25:33.640Z
CVE-2020-4421 
IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify. IBM X-Force ID: 180084.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: WebSphere Application Server Liberty
Published: 2020-05-06T13:45:19.320Z
CVE-2020-4422 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 180167.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:45.983Z
CVE-2020-4427 
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2020-05-07T19:20:18.815Z
CVE-2020-4428 
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2020-05-07T19:20:19.315Z
CVE-2020-4429 
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2020-05-07T19:20:19.816Z
CVE-2020-4430 
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2020-05-07T19:20:20.323Z
CVE-2020-4431 
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 180761.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Planning Analytics Local
Published: 2020-06-02T13:45:23.412Z
CVE-2020-4432 
Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API. IBM X-Force ID: 180810.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Aspera Streaming
vendor: IBM
product: Aspera High-Speed Transfer Endpoint
vendor: IBM
product: Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)
vendor: IBM
product: Aspera Server On Demand
vendor: IBM
product: Aspera Faspex On Demand
vendor: IBM
product: Aspera Proxy Server
vendor: IBM
product: Aspera Application Platform On Demand
vendor: IBM
product: Aspera Shares On Demand
vendor: IBM
product: Aspera High-Speed Transfer Server
vendor: IBM
product: Aspera Transfer Cluster Manager
Published: 2020-06-10T12:57:52.760Z
CVE-2020-4433 
Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force ID: 180814.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Aspera Faspex On Demand
vendor: IBM
product: Aspera Server On Demand
vendor: IBM
product: Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)
vendor: IBM
product: Aspera High-Speed Transfer Endpoint
vendor: IBM
product: Aspera Streaming
vendor: IBM
product: Aspera Transfer Cluster Manager
vendor: IBM
product: Aspera High-Speed Transfer Server
vendor: IBM
product: Aspera Shares On Demand
vendor: IBM
product: Aspera Application Platform On Demand
vendor: IBM
product: Aspera Proxy Server
Published: 2020-06-10T12:57:53.201Z
CVE-2020-4434 
Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180900.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Aspera Shares On Demand
vendor: IBM
product: Aspera Application Platform On Demand
vendor: IBM
product: Aspera Transfer Cluster Manager
vendor: IBM
product: Aspera High-Speed Transfer Server
vendor: IBM
product: Aspera Proxy Server
vendor: IBM
product: Aspera Faspex On Demand
vendor: IBM
product: Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)
vendor: IBM
product: Aspera High-Speed Transfer Endpoint
vendor: IBM
product: Aspera Streaming
vendor: IBM
product: Aspera Server On Demand
Published: 2020-06-10T12:57:53.734Z
CVE-2020-4435 
Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180901.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Aspera Transfer Cluster Manager
vendor: IBM
product: Aspera High-Speed Transfer Server
vendor: IBM
product: Aspera Shares On Demand
vendor: IBM
product: Aspera Application Platform On Demand
vendor: IBM
product: Aspera Proxy Server
vendor: IBM
product: Aspera Faspex On Demand
vendor: IBM
product: Aspera Server On Demand
vendor: IBM
product: Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)
vendor: IBM
product: Aspera Streaming
vendor: IBM
product: Aspera High-Speed Transfer Endpoint
Published: 2020-06-10T12:57:54.172Z
CVE-2020-4436 
Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code through a service. IBM X-Force ID: 180902.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Aspera Faspex On Demand
vendor: IBM
product: Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)
vendor: IBM
product: Aspera High-Speed Transfer Endpoint
vendor: IBM
product: Aspera Streaming
vendor: IBM
product: Aspera Server On Demand
vendor: IBM
product: Aspera Shares On Demand
vendor: IBM
product: Aspera Application Platform On Demand
vendor: IBM
product: Aspera Transfer Cluster Manager
vendor: IBM
product: Aspera High-Speed Transfer Server
vendor: IBM
product: Aspera Proxy Server
Published: 2020-06-10T12:57:54.614Z
CVE-2020-4445 
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Engineering Workflow Management
Published: 2020-09-02T18:25:24.362Z
CVE-2020-4446 
IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass security restrictions, caused by the failure to perform insufficient authorization checks. IBM X-Force ID: 181126.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Business Process Manager Standard
vendor: IBM
product: Business Automation Workflow
Published: 2020-05-06T13:45:19.952Z
CVE-2020-4447 
IBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181227.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: FileNet Content Manager
Published: 2020-07-23T16:05:15.286Z
CVE-2020-4448 
IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 181228.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2020-06-05T12:55:17.738Z
CVE-2020-4449 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive information with a specially-crafted sequence of serialized objects. IBM X-Force ID: 181230.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2020-06-05T12:55:18.184Z
CVE-2020-4450 
IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects. IBM X-Force ID: 181231.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2020-06-05T12:55:18.635Z
CVE-2020-4452 
IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 181324.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: API Connect
Published: 2020-06-29T13:30:13.851Z
CVE-2020-4459 
IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Secret Server
Published: 2020-08-04T16:00:25.928Z
CVE-2020-4461 
IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing id_token claims manipulation without verification. IBM X-Force ID: 181481.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Security Access Manager Appliance
Published: 2020-05-20T12:35:12.314Z
CVE-2020-4462 
IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181482.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling Secure Proxy
vendor: IBM
product: External Authentication Server
vendor: IBM
product: Sterling External Authentication Server
Published: 2020-07-16T15:05:35.729Z
CVE-2020-4463 
IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181484.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2020-07-29T14:05:29.553Z
CVE-2020-4464 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code on a system with a specially-crafted sequence of serialized objects over the SOAP connector. IBM X-Force ID: 181489.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2020-07-17T13:45:14.587Z
CVE-2020-4465 
IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an error within the channel processing code. A remote attacker could overflow the buffer using an older client and cause a denial of service. IBM X-Force ID: 181562.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ Appliance
Published: 2020-07-28T12:05:27.638Z
CVE-2020-4466 
IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow a remote authenticated attacker could cause a denial of service due to an error within the Queue processing function. IBM X-Force ID: 181563.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ for HPE NonStop
Published: 2020-07-20T14:05:24.605Z
CVE-2020-4467 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by memory corruption. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 181721.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:46.435Z
CVE-2020-4468 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by memory corruption. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 181723.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:46.885Z
CVE-2020-4469 
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. This vulnerability is due to an incomplete fix for CVE-2020-4211. IBM X-Force ID: 181724.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-06-15T13:25:25.847Z
CVE-2020-4470 
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. IBM X-Force ID: 181725.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-06-15T13:25:26.303Z
CVE-2020-4471 
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially crafted HTTP command to the remote server. IBM X-Force ID: 181726.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-06-15T13:25:26.806Z
CVE-2020-4475 
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2020-11-16T16:40:33.069Z