rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-4249 
IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticated users on the sytem due to incorrect authorization. IBM X-Force ID: 175485.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2020-05-28T14:45:37.718Z
CVE-2020-4251 
IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175489.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: API Connect
Published: 2020-06-12T13:10:12.476Z
CVE-2020-4252 
IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175490.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2020-04-08T14:05:44.555Z
CVE-2020-4253 
IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Content Navigator
Published: 2020-03-24T15:20:22.851Z
CVE-2020-4254 
IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Big Data Intelligence
Published: 2020-10-16T16:40:18.428Z
CVE-2020-4257 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175635.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:38.980Z
CVE-2020-4258 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175637.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:39.416Z
CVE-2020-4259 
IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionality not authorized to. IBM X-Force ID: 175638.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Sterling File Gateway
Published: 2020-05-14T15:50:39.915Z
CVE-2020-4260 
IBM UrbanCode Deploy (UCD) 7.0.5 could allow a user with special permissions to obtain sensitive information via generic processes. IBM X-Force ID: 175639.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: UrbanCode Deploy
Published: 2020-04-16T15:35:21.226Z
CVE-2020-4261 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175644.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:40.360Z
CVE-2020-4262 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175645.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:40.811Z
CVE-2020-4263 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175646.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:41.249Z
CVE-2020-4264 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175647.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:41.704Z
CVE-2020-4265 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175648.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:42.204Z
CVE-2020-4266 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175649.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:42.727Z
CVE-2020-4267 
IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak. IBM X-Force ID: 175840.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ Appliance
Published: 2020-04-24T15:50:21.949Z
CVE-2020-4268 
IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 175841.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Qradar
vendor: IBM
product: QRadar
Published: 2020-04-15T15:13:55.032Z
CVE-2020-4269 
IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-ForceID: 175845.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Qradar
vendor: IBM
product: QRadar
Published: 2020-04-15T15:13:55.462Z
CVE-2020-4270 
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Qradar
vendor: IBM
product: QRadar
Published: 2020-04-15T15:13:55.908Z
CVE-2020-4271 
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Qradar
vendor: IBM
product: QRadar
Published: 2020-04-15T15:13:56.391Z
CVE-2020-4272 
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-ForceID: 175898.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: QRadar
vendor: IBM
product: Qradar
Published: 2020-04-15T15:13:56.922Z
CVE-2020-4273 
IBM Spectrum Scale 4.2 and 5.0 could allow a local unprivileged attacker with intimate knowledge of the enviornment to execute commands as root using specially crafted input. IBM X-Force ID: 175977.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2020-04-03T12:35:12.184Z
CVE-2020-4274 
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks. IBM X-ForceID: 175980.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: QRadar
vendor: IBM
product: Qradar
Published: 2020-04-15T15:13:57.349Z
CVE-2020-4276 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP connector. X-Force ID: 175984.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2020-03-26T13:20:15.911Z
CVE-2020-4277 
IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an attacker formulate future attacks. IBM X-Force ID: 175993.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: TRIRIGA Application Platform
Published: 2020-04-17T13:25:27.100Z
CVE-2020-4278 
IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user to escalate their privileges due to weak file permissions when specific debug settings are enabled in a Linux or Unix enviornment. IBM X-Force ID: 176137.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum LSF
vendor: IBM
product: Spectrum LSF Suites
vendor: IBM
product: Spectrum Computing Suite for High Performance Analytics
Published: 2020-03-05T15:20:13.418Z
CVE-2020-4280 
IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 176140.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2020-10-08T13:20:16.545Z
CVE-2020-4281 
IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176141.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2020-06-19T16:10:15.230Z
CVE-2020-4282 
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to perform unauthorized actions by bypassing illegal character restrictions. X-Force ID: 176205.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Security Information Queue
Published: 2020-04-08T14:05:44.995Z
CVE-2020-4283 
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 176206.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Information Queue
Published: 2020-03-02T14:00:23.248Z
CVE-2020-4284 
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Information Queue
Published: 2020-04-08T14:05:45.434Z
CVE-2020-4285 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176266
Problem types: description: Gain Access
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:43.221Z
CVE-2020-4286 
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 176268.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2020-05-19T13:15:18.853Z
CVE-2020-4287 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176269.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:43.670Z
CVE-2020-4288 
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176270.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: i2 Analysts Notebook
Published: 2020-05-14T15:50:44.112Z
CVE-2020-4289 
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 176332.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Information Queue
Published: 2020-04-08T14:05:45.874Z
CVE-2020-4290 
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Information Queue
Published: 2020-04-08T14:05:46.353Z
CVE-2020-4291 
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176334.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Information Queue
Published: 2020-04-08T14:05:46.777Z
CVE-2020-4292 
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Information Queue
Published: 2020-03-02T14:00:23.669Z
CVE-2020-4294 
IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 176404.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Qradar
vendor: IBM
product: QRadar
Published: 2020-04-15T15:13:57.784Z
CVE-2020-4295 
IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176408.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2020-06-19T16:10:15.736Z
CVE-2020-4297 
IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176474.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2020-06-19T16:10:16.219Z
CVE-2020-4298 
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176475.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2020-05-19T13:15:19.307Z
CVE-2020-4299 
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafted HTTP request. IBM X-Force ID: 176606.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2020-05-14T15:50:44.609Z
CVE-2020-4300 
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 176607.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2021-05-31T15:10:42.550Z
CVE-2020-4301 
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 176609.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2022-09-01T19:00:24.592Z
CVE-2020-4302 
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176610.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2020-10-12T13:20:28.623Z
CVE-2020-4303 
IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176668.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Application Server Liberty
Published: 2020-04-02T14:20:21.131Z
CVE-2020-4304 
IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176670.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Application Server Liberty
Published: 2020-04-02T14:20:21.558Z
CVE-2020-4305 
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176677.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2020-07-09T19:05:20.949Z
CVE-2020-4306 
IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176735.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Planning Analytics Local
Published: 2020-05-29T13:10:19.714Z
CVE-2020-4307 
IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force ID: 176997.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Security Guardium
Published: 2020-06-03T14:30:22.184Z
CVE-2020-4309 
IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force ID: 177080.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Content Navigator
Published: 2020-03-24T15:20:23.270Z
CVE-2020-4310 
IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logic. IBM X-Force ID: 177081.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: WebSphere MQ
vendor: IBM
product: MQ
Published: 2020-06-16T13:45:21.461Z
CVE-2020-4311 
IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL files located in the same directory and execute arbitrary code on the system. IBM X-Force ID: 177083.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Tivoli Monitoring
Published: 2020-04-23T13:10:23.928Z
CVE-2020-4312 
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitive information from a cached web page. IBM X-Force ID: 177089.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2020-05-13T12:35:12.324Z