Browse CVEs

MEDIUM 6.8 CVE-2011-1045 Unspecified vulnerability in the Rendition Engine (aka P8RE) 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager (CM) allows remote attackers to ga… Filenet P8 Rendition Engine No fix yet Fix from $1,6002011-02-21 MEDIUM 5.0 CVE-2011-1046 IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM… Filenet P8 Content Engine Mitigation only Fix from $1,6002011-02-21 HIGH 9.3 CVE-2011-1033 Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted argume… Informix Dynamic Server Mitigation only Fix from $1,9502011-02-15 MEDIUM 6.8 CVE-2011-1032 IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, wh… Lotus Connections Mitigation only Fix from $1,6002011-02-15 HIGH 10.0 CVE-2011-0916EPSS 6% Stack-based buffer overflow in the SMTP service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long arguments in a filenam… Lotus Domino Mitigation only Fix from $1,9502011-02-08 HIGH 10.0 CVE-2011-0917EPSS 14% Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operation, aka S… Lotus Domino Mitigation only Fix from $1,9502011-02-08 HIGH 10.0 CVE-2011-0918EPSS 6% Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filena… Lotus Domino Mitigation only Fix from $1,9502011-02-08 HIGH 10.0 CVE-2011-0919EPSS 6% Multiple stack-based buffer overflows in the (1) POP3 and (2) IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via … Lotus Domino Mitigation only Fix from $1,9502011-02-08 HIGH 9.3 CVE-2011-0912 Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary co… Lotus Notes Mitigation only Fix from $1,9502011-02-08 HIGH 9.3 CVE-2011-0920EPSS 10% The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to by… Lotus Domino Mitigation only Fix from $1,9502011-02-08 HIGH 10.0 CVE-2011-0732 Multiple unspecified vulnerabilities in IBM Tivoli Integrated Portal (TIP) 1.1.1.1, as used in IBM Tivoli Common Reporting (TCR) 1.2.0 before Interim… Tivoli Integrated Portal No fix yet Fix from $1,9502011-02-01 MEDIUM 5.0 CVE-2011-0679 IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal, allows rem… Websphere Portal No fix yet Fix from $1,6002011-01-28 MEDIUM 5.0 CVE-2011-0494 Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-… Tivoli Access Manager For E Business Mitigation only Fix from $1,6002011-01-19 MEDIUM 6.8 CVE-2011-0310 Buffer overflow in IBM WebSphere MQ 7.0 before 7.0.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (application cr… Websphere Mq Mitigation only Fix from $1,6002011-01-13 MEDIUM 6.5 CVE-2011-0314 Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated users to execute arbitrary code… Websphere Mq Mitigation only Fix from $1,6002011-01-12 MEDIUM 5.0 CVE-2011-0316 The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict… Websphere Application Server Mitigation only Fix from $1,6002011-01-12 MEDIUM 5.0 CVE-2010-4622 Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attac… Tivoli Access Manager For E Business No fix yet Fix from $1,6002010-12-30 HIGH 10.0 CVE-2010-4601 Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 allow attac… Rational Clearquest Mitigation only Fix from $1,9502010-12-29 MEDIUM 6.6 CVE-2010-4605 Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before … Tivoli Storage Manager Mitigation only Fix from $1,6002010-12-29 MEDIUM 6.5 CVE-2010-4603 IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of back-reference fie… Rational Clearquest Mitigation only Fix from $1,6002010-12-29 MEDIUM 5.0 CVE-2010-2644 IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to pe… Websphere Service Registry And Repository Mitigation only Fix from $1,6002010-12-22 MEDIUM 5.0 CVE-2010-2639 IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving acc… Websphere Commerce Mitigation only Fix from $1,6002010-12-06 HIGH 7.5 CVE-2010-3893 The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka SID) value to a single IP addre… Omnifind No fix yet Fix from $1,9502010-11-12 HIGH 7.5 CVE-2010-3896 The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote attackers … Omnifind No fix yet Fix from $1,9502010-11-12 MEDIUM 6.8 CVE-2010-3892 Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x allows remote attacker… Omnifind Mitigation only Fix from $1,6002010-11-12 MEDIUM 5.0 CVE-2010-3897 ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in the HTML source code, which migh… Omnifind Mitigation only Fix from $1,6002010-11-12 MEDIUM 5.0 CVE-2010-3898 IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might allow remo… Omnifind Mitigation only Fix from $1,6002010-11-12 MEDIUM 5.0 CVE-2010-3899 IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial … Omnifind No fix yet Fix from $1,6002010-11-12 HIGH 10.0 CVE-2010-4218 Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed to the int… Enovia No fix yet Fix from $1,9502010-11-09 MEDIUM 5.0 CVE-2010-4216 IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, whi… Tivoli Directory Server Mitigation only Fix from $1,6002010-11-09