rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-4173 
IBM Guardium Activity Insights 10.6 and 11.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 174682.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: InfoSphere Guardium Activity Monitor
Published: 2020-07-09T19:05:20.200Z
CVE-2020-4174 
IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174683.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2020-08-27T12:40:12.675Z
CVE-2020-4175 
IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174684.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2020-08-27T12:40:33.582Z
CVE-2020-4177 
IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174732.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-06-03T14:30:20.049Z
CVE-2020-4180 
IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 174735.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-06-03T14:30:20.477Z
CVE-2020-4182 
IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174738.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-06-03T14:30:20.898Z
CVE-2020-4183 
IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174739.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-06-04T13:35:17.910Z
CVE-2020-4184 
IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 174802..
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security Guardium
Published: 2021-03-15T15:30:16.754Z
CVE-2020-4185 
IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174803.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-07-30T12:55:14.156Z
CVE-2020-4186 
IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174804.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-07-30T12:55:14.650Z
CVE-2020-4187 
IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174805.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-06-03T14:30:21.322Z
CVE-2020-4188 
IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbers. IBM X-Force ID: 174807.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-06-23T18:05:12.880Z
CVE-2020-4189 
IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2021-01-27T16:35:31.552Z
CVE-2020-4190 
IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174851.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-06-03T14:30:21.754Z
CVE-2020-4191 
IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174852.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-06-04T13:35:18.398Z
CVE-2020-4193 
IBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 174857.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-06-04T13:35:18.836Z
CVE-2020-4195 
IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 174859.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: API Connect
Published: 2020-05-12T13:40:17.221Z
CVE-2020-4196 
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174907.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2020-03-03T13:50:19.912Z
CVE-2020-4197 
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174908.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2020-03-03T13:50:20.326Z
CVE-2020-4198 
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174909.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2020-03-03T13:50:20.788Z
CVE-2020-4199 
IBM Tivoli Netcool/OMNIbus 8.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 174910.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2020-03-18T13:55:13.330Z
CVE-2020-4200 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated attacker to send specially crafted commands to cause a denial of service. IBM X-Force ID: 174914.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DB2 for Linux- UNIX and Windows
Published: 2020-02-19T15:15:46.270Z
CVE-2020-4202 
IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End (DFE). IBM X-Force ID: 174955.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: UrbanCode Deploy
Published: 2020-04-23T13:10:23.439Z
CVE-2020-4203 
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls. IBM X-Force ID: 174956.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2020-03-19T13:40:15.081Z
CVE-2020-4204 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 174960.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux- UNIX and Windows
Published: 2020-02-19T15:15:46.680Z
CVE-2020-4205 
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, and continue to access the server even after authentication certificates have been revolked. IBM X-Force ID: 174961.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2020-03-19T13:40:15.501Z
CVE-2020-4206 
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied input. IBM X-Force ID: 174966.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-03-31T14:31:23.109Z
CVE-2020-4207 
IBM Watson IoT Message Gateway 2.0.0.x, 5.0.0.0, 5.0.0.1, and 5.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking when handling a failed HTTP request with specific content in the headers. By sending a specially crafted HTTP request, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause a denial of service. IBM X-Force ID: 174972.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: WIoTP MessageGateway
vendor: IBM
product: IoT MessageSight
Published: 2020-01-28T18:30:57.977Z
CVE-2020-4208 
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174975.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-03-31T14:31:26.191Z
CVE-2020-4209 
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to create arbitrary files on the system. IBM X-Force ID: 175019.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-05-04T13:30:13.384Z
CVE-2020-4210 
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175020.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-02-24T15:35:30.950Z
CVE-2020-4211 
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175022.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-02-24T15:35:31.374Z
CVE-2020-4212 
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175023.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-02-24T15:35:31.845Z
CVE-2020-4213 
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175024.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-02-24T15:35:32.264Z
CVE-2020-4214 
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused by improper validation of user-supplied input. IBM X-Force ID: 175026.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-03-31T14:31:29.271Z
CVE-2020-4216 
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 175066.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-06-15T13:25:24.883Z
CVE-2020-4217 
The IBM Spectrum Scale 4.2 and 5.0 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster and the availability of file systems managed by Spectrum Scale. IBM X-Force ID: 175067.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2020-03-09T14:40:14.564Z
CVE-2020-4222 
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175091.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-02-24T15:35:32.683Z
CVE-2020-4223 
IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175121.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2020-06-26T13:45:30.835Z
CVE-2020-4224 
IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links. IBM X-Force ID: 175133.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: StoredIQ
Published: 2020-02-03T16:45:18.722Z
CVE-2020-4226 
IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 175207.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: MobileFirst Platform Foundation
Published: 2020-05-27T13:15:27.868Z
CVE-2020-4229 
IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain unauthorized access to a user's session. IBM X-Force ID: 175211.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: MobileFirst Platform Foundation
Published: 2020-06-05T12:55:17.247Z
CVE-2020-4230 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privilege when an authenticated local attacker with special permissions executes specially crafted Db2 commands. IBM X-Force ID: 175212.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux- UNIX and Windows
Published: 2020-02-19T15:15:47.143Z
CVE-2020-4231 
IBM Security Identity Governance and Intelligence 5.2.6 could allow an authenticated user to perform unauthorized commands due to hazardous input validation. IBM X-Force ID: 175335.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2020-05-28T14:45:34.743Z
CVE-2020-4232 
IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2020-05-28T14:45:35.190Z
CVE-2020-4233 
IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM X-Force ID: 175360.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2020-05-28T14:45:35.802Z
CVE-2020-4235 
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175408.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Tivoli Netcool Impact
Published: 2020-03-31T14:31:32.193Z
CVE-2020-4236 
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to improper content parsing in the project management module. IBM X-Force ID: 175409.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Tivoli Netcool Impact
Published: 2020-03-31T14:31:35.318Z
CVE-2020-4237 
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 175410.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Tivoli Netcool Impact
Published: 2020-03-31T14:31:39.725Z
CVE-2020-4238 
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 175411.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Tivoli Netcool Impact
Published: 2020-03-31T14:31:42.830Z
CVE-2020-4239 
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175412.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Tivoli Netcool Impact
Published: 2020-03-31T14:31:45.875Z
CVE-2020-4240 
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to overwrite or create arbitrary files on the system. IBM X-Force ID: 175417.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-03-31T14:31:48.726Z
CVE-2020-4241 
IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 175418.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-03-31T14:31:51.851Z
CVE-2020-4242 
IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 175419.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-03-31T14:31:54.455Z
CVE-2020-4243 
IBM Security Identity Governance and Intelligence 5.2.6 Virtual Appliance could allow a remote attacker to obtain sensitive information using man in the middle techniques due to not properly invalidating session tokens. IBM X-Force ID: 175420.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2020-08-05T13:15:16.738Z
CVE-2020-4244 
IBM Security Identity Governance and Intelligence 5.2.6 could allow an unauthorized user to obtain sensitive information through user enumeration. IBM X-Force ID: 175422.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2020-05-28T14:45:36.299Z
CVE-2020-4245 
IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 175423.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2020-05-28T14:45:36.788Z
CVE-2020-4246 
IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 175481.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2020-05-28T14:45:37.227Z
CVE-2020-4248 
IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175484.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2020-05-28T15:25:12.393Z