rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-4176 
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security restrictions, caused by an error related to insecure HTTP Methods. An attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 158881.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Controller
Published: 2019-06-17T15:10:22.914Z
CVE-2019-4177 
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158882.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Controller
Published: 2019-06-17T15:10:22.951Z
CVE-2019-4178 
IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to write or view arbitrary files on the system. IBM X-Force ID: 158919.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2019-04-15T14:55:26.577Z
CVE-2019-4183 
IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that could allow a remote user to send specially crafted requests that would consume all available CPU and memory resources. IBM X-Force ID: 158973.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2019-09-17T19:05:23.824Z
CVE-2019-4184 
IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158974.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz Reporting Service
Published: 2019-05-29T15:10:24.296Z
CVE-2019-4185 
IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configured component. IBM X-Force ID: 158975.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2019-06-06T00:35:18.852Z
CVE-2019-4186 
IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-force ID: 158976.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2019-09-05T14:50:15.588Z
CVE-2019-4193 
IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2019-07-11T19:55:18.721Z
CVE-2019-4194 
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow a user to delete authorized resources. IBM X-Force ID: 159033.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2019-07-17T14:05:20.944Z
CVE-2019-4201 
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 159122.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2019-06-06T00:35:18.894Z
CVE-2019-4202 
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: API Connect
Published: 2019-04-15T14:55:26.623Z
CVE-2019-4203 
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: API Connect
Published: 2019-04-15T14:55:26.668Z
CVE-2019-4204 
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159125.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Automation Workflow
Published: 2019-05-10T14:40:20.008Z
CVE-2019-4207 
IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 may disclose sensitive information only available to a local user that could be used in further attacks against the system. IBM X-Force ID: 159148.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: TRIRIGA Application Platform
Published: 2019-05-07T18:35:20.821Z
CVE-2019-4208 
IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: TRIRIGA Application Platform
Published: 2019-05-07T18:35:20.860Z
CVE-2019-4209 
HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks.
Problem types: description: "Open Redirect"
Affected products: vendor: HCL
product: HCL Connections
Published: 2020-05-01T16:10:02.000Z
CVE-2019-4210 
IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application configuration. IBM X-Force ID: 158986.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2019-04-08T14:50:38.251Z
CVE-2019-4211 
IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159131.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2019-07-17T14:05:20.990Z
CVE-2019-4212 
IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159132.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2019-07-25T14:30:21.040Z
CVE-2019-4214 
IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 159185.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: SmartCloud Analytics
Published: 2019-11-22T15:21:22.072Z
CVE-2019-4215 
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 159186.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: SmartCloud Analytics
Published: 2019-11-22T15:21:22.504Z
CVE-2019-4216 
IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM X-Force ID: 159187.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: SmartCloud Analytics
Published: 2019-11-22T15:21:22.930Z
CVE-2019-4217 
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 159226.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Information Queue
Published: 2019-06-06T20:45:19.188Z
CVE-2019-4218 
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 159227.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Information Queue
Published: 2019-06-06T20:45:19.229Z
CVE-2019-4219 
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 159228.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Information Queue
Published: 2019-06-06T20:45:19.267Z
CVE-2019-4220 
IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be used to decrypt sensitive information. IBM X-Force ID: 159229.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2019-06-06T00:35:18.939Z
CVE-2019-4222 
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to view process definition of a business process without permission. IBM X-Force ID: 159231.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-04-25T14:36:43.789Z
CVE-2019-4224 
IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 159240.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: PureApplication System
Published: 2019-06-26T14:35:17.856Z
CVE-2019-4225 
IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 159242.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: PureApplication System
Published: 2019-06-26T14:35:17.957Z
CVE-2019-4226 
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159243.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cloud Pak System
Published: 2019-12-03T14:55:23.441Z
CVE-2019-4227 
IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unauthorized user to conduct a session fixation attack due to clients not being disconnected as they should. IBM X-Force ID: 159352.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: MQ
Published: 2019-10-04T14:05:20.248Z
CVE-2019-4231 
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159356.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2019-12-20T16:25:25.056Z
CVE-2019-4234 
IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by intercepting the subsequent requests can bypass business logic to modify the pattern to unlocked state. IBM X-Force ID: 159416.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: PureApplication System
Published: 2019-06-26T14:35:18.000Z
CVE-2019-4235 
IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 159417.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: PureApplication System
Published: 2019-06-26T14:35:18.043Z
CVE-2019-4236 
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to restore or retrieve the object with incorrect ACL entries. IBM X-Force ID: 159418.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect
Published: 2019-07-22T13:35:13.777Z
CVE-2019-4237 
A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to load the vulnerable application inside an HTML iframe tag on a malicious page. IBM X-Force ID: 159419.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2019-07-01T15:05:37.810Z
CVE-2019-4238 
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159464.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2019-04-25T14:36:43.827Z
CVE-2019-4239 
IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 159465.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: MQ Advanced Cloud Pak (IBM Cloud Private)
vendor: IBM
product: MQ Advanced Cloud Pak (IBM Cloud Private on RedHat OpenShift)
Published: 2019-06-14T14:45:18.008Z
CVE-2019-4241 
IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local access to bypass authentication and obtain administrative access. IBM X-Force ID: 159467.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: PureApplication System
Published: 2019-06-26T14:35:18.087Z
CVE-2019-4243 
IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xml and could allow an attacker to perform disruptive administrator tasks. IBM X-Force ID: 159517.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: SmartCloud Analytics
Published: 2019-11-22T15:21:23.358Z
CVE-2019-4244 
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication. IBM X-Force ID: 159518.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: SmartCloud Analytics
Published: 2019-12-10T16:10:23.706Z
CVE-2019-4246 
IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM X-Force ID: 159521.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Daeja ViewONE Virtual
Published: 2019-10-01T14:30:23.913Z
CVE-2019-4249 
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159647.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2019-06-27T13:45:29.879Z
CVE-2019-4250 
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159648.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2019-06-27T13:45:29.921Z
CVE-2019-4252 
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 159883.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2019-06-27T13:45:29.960Z
CVE-2019-4253 
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gain root access privileges. IBM X-Force ID: 159941.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Informix Dynamic Server Enterprise Edition
Published: 2019-08-20T18:50:23.064Z
CVE-2019-4256 
IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 159944.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: API Connect
Published: 2019-05-29T15:10:24.357Z
CVE-2019-4257 
IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2019-06-06T20:45:19.306Z
CVE-2019-4258 
IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159946.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2019-05-01T15:15:20.930Z
CVE-2019-4259 
A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CES stack enabled that could allow sensitive data to be included with service snaps. IBM X-Force ID: 160011.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2019-05-13T15:55:19.101Z
CVE-2019-4260 
IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Daeja ViewONE
Published: 2019-07-02T15:05:23.258Z
CVE-2019-4261 
IBM WebSphere MQ V7.1, 7.5, IBM MQ V8, IBM MQ V9.0LTS, IBM MQ V9.1 LTS, and IBM MQ V9.1 CD are vulnerable to a denial of service attack caused by specially crafted messages. IBM X-Force ID: 160013.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2019-08-05T13:40:15.514Z
CVE-2019-4262 
IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2019-09-26T15:05:30.533Z
CVE-2019-4263 
IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Content Navigator
Published: 2019-07-11T19:55:18.767Z
CVE-2019-4264 
IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due to not validating or incorrectly validating a certificate. IBM X-Force ID: 160072.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2019-05-29T15:10:24.408Z
CVE-2019-4265 
IBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160198.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Maximo Anywhere
Published: 2019-10-10T14:00:19.786Z
CVE-2019-4266 
IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 does not have device jailbreak detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160199.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Maximo Anywhere
Published: 2020-05-06T13:45:18.031Z
CVE-2019-4267 
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code on the local system or the application to crash. IBM X-Force ID: 160200.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum Protect
Published: 2019-07-22T13:35:13.827Z
CVE-2019-4268 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 160201.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2019-09-17T19:05:23.877Z
CVE-2019-4269 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console could allow a remote attacker to obtain sensitive information when a specially crafted url causes a stack trace to be dumped. IBM X-Force ID: 160202.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2019-06-28T16:15:16.241Z