Browse CVEs

HIGH 7.8 CVE-2009-3900 Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the op… Powerha Patch available Fix from $1,9502009-11-06 HIGH 10.0 CVE-2009-3854EPSS 6% Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows … Tivoli Storage Manager Patch available Fix from $1,9502009-11-04 HIGH 9.3 CVE-2009-3853EPSS 37% Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 b… Tivoli Storage Manager Patch available Fix from $1,9502009-11-04 HIGH 9.3 CVE-2009-3855 Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manag… Tivoli Storage Manager Patch available Fix from $1,9502009-11-04 HIGH 7.5 CVE-2009-3852 Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related t… Runtimes For Java Technology after 5.0.0 Fix from $1,9502009-11-03 HIGH 10.0 CVE-2009-3699EPSS 62% Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earli… Vios after 2.1.0 Fix from $1,9502009-10-15 HIGH 9.3 CVE-2009-3691EPSS 7% Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attacke… Informix Client Sdk No fix yet Fix from $1,9502009-10-13 HIGH 10.0 CVE-2009-3517 nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass… Aix Patch available Fix from $1,9502009-10-01 HIGH 9.3 CVE-2009-3518EPSS 5% Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot an… Installation Manager after 1.3.2 Fix from $1,9502009-10-01 HIGH 7.2 CVE-2009-3516 gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to… Aix Patch available Fix from $1,9502009-10-01 HIGH 10.0 CVE-2009-3473 IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and re… Db2 Mitigation only Fix from $1,9502009-09-29 HIGH 7.5 CVE-2009-3471 IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss … Db2 Mitigation only Fix from $1,9502009-09-29 MEDIUM 6.5 CVE-2009-3472 IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, inser… Db2 Mitigation only Fix from $1,6002009-09-29 MEDIUM 5.0 CVE-2009-3470 IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a deni… Informix Dynamic Server Mitigation only Fix from $1,6002009-09-29 HIGH 7.8 CVE-2009-2744 Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to cause a denial of service via unkn… Websphere Application Server Patch available Fix from $1,9502009-09-21 HIGH 10.0 CVE-2009-2741 Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers t… Websphere Business Events Mitigation only Fix from $1,9502009-09-18 HIGH 8.8 CVE-2009-3160 IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows … Websphere Mq Patch available Fix from $1,9502009-09-10 HIGH 7.8 CVE-2009-3159 Unspecified vulnerability in the rriDecompress function in IBM WebSphere MQ 7.0.0.0, 7.0.0.1, and 7.0.0.2 allows remote attackers to cause a denial o… Websphere Mq Patch available Fix from $1,9502009-09-10 HIGH 7.8 CVE-2009-3161 The server in IBM WebSphere MQ 7.0.0.1, 7.0.0.2, and 7.0.1.0 allows attackers to cause a denial of service (trap) or possibly have unspecified other … Websphere Mq Patch available Fix from $1,9502009-09-10 HIGH 7.5 CVE-2009-3114 The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute a… Lotus Notes Mitigation only Fix from $1,9502009-09-09 MEDIUM 5.0 CVE-2009-3106 The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37 does not properly implement security const… Websphere Application Server Patch available Fix from $1,6002009-09-08 HIGH 7.8 CVE-2009-3089 IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecifie… Tivoli Directory Server No fix yet Fix from $1,9502009-09-08 HIGH 7.5 CVE-2009-3088 Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via u… Tivoli Directory Server No fix yet Fix from $1,9502009-09-08 MEDIUM 5.0 CVE-2009-3087 Unspecified vulnerability in nserver.exe in the server in IBM Lotus Domino 8.0 on Windows Server 2003 allows remote attackers to cause a denial of se… Lotus Domino No fix yet Fix from $1,6002009-09-08 MEDIUM 5.0 CVE-2009-3090 Unspecified vulnerability in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to cause a denial of service via unknown vectors,… Tivoli Directory Server No fix yet Fix from $1,6002009-09-08 HIGH 9.3 CVE-2009-3037EPSS 6% Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec M… Lotus Notes Patch available Fix from $1,9502009-09-01 MEDIUM 5.0 CVE-2009-2956 The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient acc… Websphere Commerce Suite Mitigation only Fix from $1,6002009-08-24 MEDIUM 5.0 CVE-2009-2858 Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption)… Db2 after 8.1 Fix from $1,6002009-08-19 MEDIUM 5.0 CVE-2009-2860 Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via "malicious pa… Db2 after 8.1 Fix from $1,6002009-08-19 HIGH 10.0 CVE-2008-6973 Multiple unspecified vulnerabilities in IBM WebSphere Commerce 6.0 before 6.0.0.7 have unknown impact and attack vectors. Websphere Commerce Patch available Fix from $1,9502009-08-13