Browse CVEs

HIGH 7.5 CVE-2002-0554EPSS 7% webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack … Informix Web Datablade No fix yet Fix from $1,9502002-07-03 HIGH 7.5 CVE-2002-0555 IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in… Informix Web Datablade Mitigation only Fix from $1,9502002-07-03 HIGH 7.5 CVE-2002-0037 Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes AP… Lotus Domino Server Mitigation only Fix from $1,9502002-04-22 MEDIUM 5.0 CVE-2002-1619 Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump). Aix Mitigation only Fix from $1,6002002-03-08 HIGH 7.5 CVE-2001-1504 Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automaticall… Lotus Notes Mitigation only Fix from $1,9502001-12-31 HIGH 7.5 CVE-2001-1529 Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of detai… Aix Mitigation only Fix from $1,9502001-12-31 HIGH 7.5 CVE-2001-1557 Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges. Aix Mitigation only Fix from $1,9502001-12-31 MEDIUM 5.0 CVE-2001-1554 IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (P… Aix Mitigation only Fix from $1,6002001-12-31 HIGH 10.0 CVE-2001-1440EPSS 5% Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system. Aix Mitigation only Fix from $1,9502001-12-21 MEDIUM 5.0 CVE-2001-1191 WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e. Tivoli Secureway Policy Director Mitigation only Fix from $1,6002001-12-11 MEDIUM 5.0 CVE-2000-1215 The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of… Lotus Domino Mitigation only Fix from $1,6002001-09-19 HIGH 10.0 CVE-2001-1061 Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error. Aix No fix yet Fix from $1,9502001-08-31 HIGH 7.2 CVE-2001-0533 Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable. Aix Mitigation only Fix from $1,9502001-08-14 HIGH 7.5 CVE-2001-1265 Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary fil… Alphaworks Tftp Server No fix yet Fix from $1,9502001-07-20 HIGH 7.5 CVE-2001-1309EPSS 5% Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstra… Secureway Directory Mitigation only Fix from $1,9502001-07-16 MEDIUM 5.0 CVE-2001-1143 IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port… Db2 Universal Database Mitigation only Fix from $1,6002001-07-11 MEDIUM 6.8 CVE-2001-1441 Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via th… Visualage For Java No fix yet Fix from $1,6002001-07-02 MEDIUM 5.0 CVE-2001-0389 IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEX… Net.commerce No fix yet Fix from $1,6002001-07-02 MEDIUM 5.0 CVE-2001-0390EPSS 5% IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %… Net.commerce No fix yet Fix from $1,6002001-07-02 MEDIUM 5.0 CVE-2001-0487 AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection. Aix Snmp Mitigation only Fix from $1,6002001-06-27 HIGH 10.0 CVE-2001-1080EPSS 6% diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privile… Aix Mitigation only Fix from $1,9502001-06-19 MEDIUM 5.0 CVE-2001-0446 IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to… Websphere Commerce Suite Mitigation only Fix from $1,6002001-06-18 HIGH 7.2 CVE-2001-1329 Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. Aix No fix yet Fix from $1,9502001-06-11 HIGH 7.2 CVE-2001-1330 Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. Aix No fix yet Fix from $1,9502001-06-11 HIGH 7.5 CVE-2001-0319EPSS 7% orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of th… Net.commerce No fix yet Fix from $1,9502001-05-03 MEDIUM 5.0 CVE-1999-0729 Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request. Lotus Domino Server No fix yet Fix from $1,6002001-03-12 HIGH 7.5 CVE-2001-0051 IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the … Db2 Universal Database No fix yet Fix from $1,9502001-02-16 HIGH 7.5 CVE-2000-1168 IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET r… HTTP Server Mitigation only Fix from $1,9502001-01-09 MEDIUM 5.0 CVE-2000-1110 document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a non… Net.data No fix yet Fix from $1,6002001-01-09 MEDIUM 5.0 CVE-2000-1117 The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine t… Lotus Notes No fix yet Fix from $1,6002001-01-09