rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-4686 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 171822.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:36.576Z
CVE-2019-4687 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 171823.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2021-01-13T17:40:20.027Z
CVE-2019-4688 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 171825.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:37.059Z
CVE-2019-4689 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 171826.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:37.495Z
CVE-2019-4691 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171828.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:37.922Z
CVE-2019-4692 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 171829.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:38.406Z
CVE-2019-4693 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 171831.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:38.830Z
CVE-2019-4694 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 171832.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:39.305Z
CVE-2019-4695 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 171926.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:15:15.231Z
CVE-2019-4697 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 171938.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:39.881Z
CVE-2019-4698 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 171929.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:40.413Z
CVE-2019-4699 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 171931.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:40.838Z
CVE-2019-4701 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:41.274Z
CVE-2019-4702 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2021-01-13T17:40:20.775Z
CVE-2019-4703 
IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacker with intimate knowledge of the system to obtain highly sensitive information.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-02-24T15:35:30.072Z
CVE-2019-4704 
IBM Security Identity Manager Virtual Appliance 7.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 172014.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Manager Virtual Appliance
Published: 2020-07-01T14:25:29.622Z
CVE-2019-4705 
IBM Security Identity Manager Virtual Appliance 7.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 172015.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Manager Virtual Appliance
Published: 2020-07-01T14:25:30.057Z
CVE-2019-4706 
IBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information. IBM X-Force ID: 172016.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Manager Virtual Appliance
Published: 2020-07-01T14:25:30.506Z
CVE-2019-4707 
IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 172018.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Access Manager Appliance
Published: 2020-01-28T18:30:57.548Z
CVE-2019-4713 
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172084.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Guardium Data Encryption
Published: 2020-08-26T19:00:41.698Z
CVE-2019-4715 
IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2019-12-11T14:25:18.166Z
CVE-2019-4716 
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Planning Analytics
Published: 2019-12-18T16:15:16.452Z
CVE-2019-4718 
IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172123.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2020-03-23T14:30:14.733Z
CVE-2019-4719 
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: MQ
Published: 2020-03-16T15:25:20.927Z
CVE-2019-4720 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available memory. IBM X-Force ID: 172125.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2020-01-31T15:30:17.175Z
CVE-2019-4722 
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2021-05-31T15:10:39.811Z
CVE-2019-4723 
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Data Server Connection page. IBM X-Force ID: 172129.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2021-05-31T15:10:40.553Z
CVE-2019-4724 
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Content Backup page. IBM X-Force ID: 172130.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2021-05-31T15:10:41.229Z
CVE-2019-4725 
IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Access Manager Appliance
Published: 2020-10-06T15:45:15.852Z
CVE-2019-4726 
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172363.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2020-02-26T15:55:24.691Z
CVE-2019-4728 
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges. IBM X-Force ID: 172452.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2021-01-05T15:10:17.666Z
CVE-2019-4729 
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 172519.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2020-04-27T13:25:16.506Z
CVE-2019-4730 
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 172533.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2021-05-31T15:10:41.894Z
CVE-2019-4731 
IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace. IBM X-Force ID: 172616.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: MQ Appliance
Published: 2020-07-28T12:05:25.329Z
CVE-2019-4732 
IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. By placing a specially-crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 172618.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Java
Published: 2020-02-03T16:45:18.286Z
CVE-2019-4735 
IBM MaaS360 3.96.62 for iOS could allow an attacker with physical access to the device to obtain sensitive information from the agent outside of the container. IBM X-Force ID: 172705.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: MaaS360
Published: 2020-04-23T13:10:22.955Z
CVE-2019-4736 
IBM Financial Transaction Manager 3.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172706.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Financial Transaction Manager
Published: 2019-12-20T16:25:25.899Z
CVE-2019-4737 
IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172707.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2020-04-08T14:05:42.711Z
CVE-2019-4738 
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2020-12-10T22:11:06.307Z
CVE-2019-4740 
IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172808.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2020-04-08T14:05:43.143Z
CVE-2019-4741 
IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Content Navigator
Published: 2020-02-12T16:10:18.241Z
CVE-2019-4742 
IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 172877.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Financial Transaction Manager
Published: 2019-12-20T16:25:26.313Z
CVE-2019-4743 
IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 172880.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Financial Transaction Manager
Published: 2019-12-20T16:25:26.824Z
CVE-2019-4744 
IBM Financial Transaction Manager 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172882.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Financial Transaction Manager
Published: 2019-12-20T16:25:27.280Z
CVE-2019-4745 
IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an authenticated user due to disclosing path information in the URL. IBM X-Force ID: 172883.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2020-02-24T15:35:30.529Z
CVE-2019-4746 
IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172885.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2020-04-08T14:05:43.577Z
CVE-2019-4747 
IBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172887.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Team Concert
Published: 2020-07-16T15:05:34.428Z
CVE-2019-4748 
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173174.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Engineering Workflow Management
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Team Concert
Published: 2020-07-16T15:05:34.858Z
CVE-2019-4749 
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173308.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2020-04-17T13:25:26.685Z
CVE-2019-4750 
IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 173310.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cloud App Management
Published: 2020-04-24T15:50:20.961Z
CVE-2019-4751 
IBM Cloud App Management 2019.3.0 and 2019.4.0 reveals a stack trace on certain API requests which can allow an attacker further information about the implementation of the offering. IBM X-Force ID: 173311.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cloud App Management
Published: 2020-04-24T15:50:21.407Z
CVE-2019-4752 
IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 173348.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Emptoris Strategic Supply Management
vendor: IBM
product: Emptoris Spend Analysis
Published: 2020-02-20T16:45:18.293Z
CVE-2019-4762 
IBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel processing function. IBM X-Force ID: 173625.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2020-04-16T15:35:20.739Z
CVE-2019-5005 
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service (application crash) via image data, because two bytes are written to the end of the allocated memory without judging whether this will cause corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T23:00:00.000Z
CVE-2019-5006 
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is a NULL pointer dereference during PDF parsing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T23:00:00.000Z
CVE-2019-5007 
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T23:00:00.000Z
CVE-2019-5008 
hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-19T18:07:38.000Z