rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-29749 
IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 201777.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Secure Proxy
vendor: IBM
product: Secure External Authentication Server
Published: 2021-07-15T16:00:19.457Z
CVE-2021-29750 
IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201778.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2021-09-15T17:55:17.236Z
CVE-2021-29751 
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Business Process Manager
vendor: IBM
product: Business Automation Workflow
vendor: IBM
product: Cloud Pak for Automation
Published: 2021-06-28T15:55:25.283Z
CVE-2021-29752 
IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions. IBM X-Fporce ID: 201780.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2021-09-16T15:50:17.099Z
CVE-2021-29753 
IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Business Process Manager
vendor: IBM
product: Business Automation Workflow
Published: 2021-11-05T17:15:11.376Z
CVE-2021-29754 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 202006.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2021-06-11T14:25:19.478Z
CVE-2021-29755 
IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM X-Force ID: 202015.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2022-07-20T17:35:14.648Z
CVE-2021-29756 
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2021-12-03T17:00:28.506Z
CVE-2021-29757 
IBM QRadar User Behavior Analytics 4.1.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202168.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: QRadar User Behavior Analytics
Published: 2021-08-02T16:00:13.415Z
CVE-2021-29758 
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2021-10-06T17:10:31.485Z
CVE-2021-29759 
IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, and 1.3 could allow a privileged user to obtain sensitive information from internal log files. IBM X-Force ID: 202212.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: App Connect Enterprise Certified Container
Published: 2021-07-07T16:30:36.764Z
CVE-2021-29760 
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface. IBM X-Force ID: 202213.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2021-10-06T17:10:33.052Z
CVE-2021-29761 
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2021-10-06T17:10:34.695Z
CVE-2021-29763 
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. IBM X-Force ID: 202267.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2021-09-16T15:50:18.694Z
CVE-2021-29764 
IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 202268.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2021-10-06T17:10:36.253Z
CVE-2021-29765 
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: PowerVM Hypervisor
Published: 2021-08-04T14:00:17.097Z
CVE-2021-29766 
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202680.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: i2 Analyze
Published: 2021-07-26T12:10:40.796Z
CVE-2021-29767 
IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202681.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: i2 Analyst's Notebook Premium
Published: 2021-07-26T12:10:42.433Z
CVE-2021-29768 
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the details of the 'Cloud Storage' page for which they should not have access. IBM X-Force ID: 202682.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2022-06-24T15:35:22.929Z
CVE-2021-29769 
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 202769.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: i2 Analyze
Published: 2021-07-26T12:10:44.050Z
CVE-2021-29770 
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 202771.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: i2 Analyze
Published: 2021-07-26T12:10:45.680Z
CVE-2021-29771 
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2021-11-02T16:00:29.020Z
CVE-2021-29772 
IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. IBM X-Force ID: 202774.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: API Connect
Published: 2021-08-26T19:25:25.958Z
CVE-2021-29773 
IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 202865.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2021-09-15T17:55:18.863Z
CVE-2021-29774 
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: 203025.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Engineering Lifecycle Optimization
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Engineering Workflow Management
Published: 2021-10-27T16:00:28.033Z
CVE-2021-29775 
IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203029.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Automation Workflow
vendor: IBM
product: Cloud Pak for Automation
Published: 2021-06-28T15:55:26.875Z
CVE-2021-29776 
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID of that user. IBM X-Force ID: 203030.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2022-04-27T15:20:28.182Z
CVE-2021-29777 
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while being accessed in another session, could allow an authenticated user to cause a denial of srevice IBM X-Force ID: 203031.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2021-06-24T18:45:30.905Z
CVE-2021-29779 
IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key exchange without entity authentication on inter-host communications using man in the middle techniques. IBM X-Force ID: 203033.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2021-12-01T17:05:22.032Z
CVE-2021-29780 
IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Resilient OnPrem
Published: 2021-07-19T16:00:28.498Z
CVE-2021-29781 
IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Partner Engagement Manager
Published: 2021-07-30T11:15:14.972Z
CVE-2021-29784 
IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 203168.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: i2 Analyze
Published: 2021-07-26T12:10:47.273Z
CVE-2021-29785 
IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 203169.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security SOAR
Published: 2022-01-20T19:40:12.352Z
CVE-2021-29786 
IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Engineering Lifecycle Optimization
vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Engineering Workflow Management
Published: 2021-10-27T16:00:29.665Z
CVE-2021-29788 
IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203310.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Engineering Requirements Quality Assistant On-Premises
Published: 2022-07-18T17:00:22.945Z
CVE-2021-29790 
IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203440.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Engineering Requirements Quality Assistant On-Premises
Published: 2022-07-18T17:00:27.433Z
CVE-2021-29792 
IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the cluster and gain privileges of another user. IBM X-Force ID: 203450.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Event Streams
Published: 2021-07-12T16:05:29.297Z
CVE-2021-29794 
IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 203556.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Tivoli Netcool Impact
Published: 2021-07-12T16:05:30.882Z
CVE-2021-29795 
IBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a specially crafted sequence of hypervisor calls from a partition that could crash the system. IBM X-Force ID: 203557.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: PowerVM Hypervisor
Published: 2021-09-21T16:00:14.633Z
CVE-2021-29798 
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2021-10-06T17:10:37.788Z
CVE-2021-29799 
IBM Engineering Requirements Quality Assistant On-Premises (All versions) could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Engineering Requirements Quality Assistant On-Premises
Published: 2022-07-18T17:00:31.822Z
CVE-2021-29800 
IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2021-09-23T16:05:32.170Z
CVE-2021-29801 
IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to gain root privileges. IBM X-Force ID: 203977.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: VIOS
vendor: IBM
product: AIX
Published: 2021-08-26T19:25:27.686Z
CVE-2021-29802 
IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security
Published: 2021-08-23T16:05:19.204Z
CVE-2021-29803 
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204164.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2021-07-12T16:05:32.447Z
CVE-2021-29804 
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204262.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2021-07-12T16:05:34.039Z
CVE-2021-29805 
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204263.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2021-07-12T16:05:35.587Z
CVE-2021-29806 
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204264.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2021-09-20T16:45:41.671Z
CVE-2021-29807 
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204265.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2021-09-20T16:45:43.338Z
CVE-2021-29808 
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204269.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2021-09-20T16:45:44.979Z
CVE-2021-29809 
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204270.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2021-09-20T16:45:46.615Z
CVE-2021-29810 
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204279.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2021-09-23T18:05:35.649Z
CVE-2021-29811 
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text which can be read by an authenticated admin user. IBM X-Force ID: 204329.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Tivoli Netcool/OMNIbus
Published: 2021-09-20T16:45:48.208Z
CVE-2021-29812 
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204330.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2021-09-23T18:05:37.365Z
CVE-2021-29813 
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204331.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2021-09-23T18:05:38.962Z
CVE-2021-29814 
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204334.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2021-09-23T18:05:40.523Z