Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Total 7776 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-2994 1 Ibm 1 Rational Clearquest 2008-09-10 6.8 MEDIUM N/A
Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote attackers to execute XML Style Sheets (XSS).
CVE-2003-0697 1 Ibm 1 Aix 2008-09-10 7.2 HIGH N/A
Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service (crash) or gain root privileges.
CVE-2003-0784 1 Ibm 1 Aix 2008-09-10 10.0 HIGH N/A
Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers.
CVE-2002-1169 1 Ibm 1 Websphere Caching Proxy Server 2008-09-10 5.0 MEDIUM N/A
IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash.
CVE-2002-1167 1 Ibm 1 Websphere Caching Proxy Server 2008-09-10 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.
CVE-2002-1168 1 Ibm 1 Websphere Caching Proxy Server 2008-09-10 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that contains an Location: header with a "%0a%0d" (CRLF) sequence, which echoes the Location as an HTTP header in the server response.
CVE-2002-0790 1 Ibm 1 Aix 2008-09-10 2.1 LOW N/A
clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges.
CVE-2001-0824 1 Ibm 1 Websphere Application Server 2008-09-10 7.5 HIGH N/A
Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.
CVE-2001-0487 1 Ibm 1 Aix Snmp 2008-09-10 5.0 MEDIUM N/A
AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.
CVE-2000-0441 1 Ibm 1 Aix 2008-09-10 5.0 MEDIUM N/A
Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.
CVE-2000-0249 1 Ibm 1 Aix 2008-09-10 7.2 HIGH N/A
The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
CVE-2000-0027 1 Ibm 1 Network Station Manager 2008-09-10 6.2 MEDIUM N/A
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.
CVE-1999-1552 1 Ibm 1 Aix 2008-09-10 7.2 HIGH N/A
dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.
CVE-1999-1403 1 Ibm 1 Tivoli Opc Tracker Agent 2008-09-10 7.2 HIGH N/A
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable), which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.
CVE-1999-1404 1 Ibm 1 Tivoli Opc Tracker Agent 2008-09-10 5.0 MEDIUM N/A
IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed data to the localtracker client port (5011), which prevents the connection from being closed properly.
CVE-1999-0852 1 Ibm 1 Websphere Application Server 2008-09-09 7.2 HIGH N/A
IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
CVE-1999-0694 1 Ibm 1 Aix 2008-09-09 2.1 LOW N/A
Denial of service in AIX ptrace system call allows local users to crash the system.
CVE-1999-0729 1 Ibm 1 Lotus Domino Server 2008-09-09 5.0 MEDIUM N/A
Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request.
CVE-1999-0745 1 Ibm 1 Aix 2008-09-09 10.0 HIGH N/A
Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
CVE-1999-0789 1 Ibm 1 Aix 2008-09-09 10.0 HIGH N/A
Buffer overflow in AIX ftpd in the libc library.