Browse CVEs

HIGH 10.0 CVE-2009-1520 Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6… Tivoli Storage Manager Client Mitigation only Fix from $1,9502009-05-05 HIGH 7.5 CVE-2009-1521 Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 th… Tivoli Storage Manager Client Patch available Fix from $1,9502009-05-05 HIGH 7.1 CVE-2009-1522 The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduct unspeci… Tivoli Storage Manager Client Patch available Fix from $1,9502009-05-05 HIGH 7.2 CVE-2009-1355 Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename. Aix Patch available Fix from $1,9502009-04-21 MEDIUM 6.8 CVE-2009-1290 Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM Bla… Advanced Management Module No fix yet Fix from $1,6002009-04-13 MEDIUM 5.0 CVE-2009-1286 The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon … Lotus Domino Patch available Fix from $1,6002009-04-13 HIGH 7.8 CVE-2009-1250 The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attack… Afs after 3.6 Fix from $1,9502009-04-09 HIGH 10.0 CVE-2009-1240 Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Securi… Proventia Desktop Endpoint Security Mitigation only Fix from $1,9502009-04-03 MEDIUM 5.0 CVE-2009-1239 IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OU… Db2 after 9.1 Fix from $1,6002009-04-03 HIGH 10.0 CVE-2009-1231 Unspecified vulnerability in the eClient in IBM DB2 Content Manager 8.4.1 before 8.4.1.1 has unknown impact and attack vectors. Db2 Content Manager Patch available Fix from $1,9502009-04-02 HIGH 10.0 CVE-2009-1178 Unspecified vulnerability in the server in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.2 and 6.x before 6.1 has unknown impact and attack vecto… Tivoli Storage Manager Patch available Fix from $1,9502009-03-31 HIGH 10.0 CVE-2009-1172 The JAX-RPC WS-Security runtime in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7… Websphere Application Server Patch available Fix from $1,9502009-03-31 HIGH 10.0 CVE-2009-1174 The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified "securi… Websphere Application Server Patch available Fix from $1,9502009-03-31 MEDIUM 5.5 CVE-2009-0892 The administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3 allows attackers to hijack user sessi… Websphere Application Server Patch available Fix from $1,6002009-03-31 HIGH 9.3 CVE-2009-0215EPSS 36% Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo com… Access Support Activex Control Mitigation only Fix from $1,9502009-03-25 MEDIUM 5.5 CVE-2009-0891 The Web Services Security component in IBM WebSphere Application Server 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23),and 6.0.2 … Websphere Application Server Patch available Fix from $1,6002009-03-25 MEDIUM 5.0 CVE-2009-1056 IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by "forcefully browsing." Rational Appscan after 5.5 Fix from $1,6002009-03-24 HIGH 7.5 CVE-2009-0508 The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.… Websphere Application Server Patch available Fix from $1,9502009-03-16 MEDIUM 6.8 CVE-2009-0880EPSS 32% Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and exe… Director after 5.20.3 Fix from $1,6002009-03-12 MEDIUM 5.0 CVE-2009-0879EPSS 8% The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a lo… Director after 5.20.3 Fix from $1,6002009-03-12 HIGH 10.0 CVE-2008-4563EPSS 29% Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Exp… Tivoli Storage Manager Patch available Fix from $1,9502009-03-11 HIGH 10.0 CVE-2009-0869EPSS 6% Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 o… Tivoli Storage Manager Hsm Patch available Fix from $1,9502009-03-10 HIGH 7.2 CVE-2009-0779 Buffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a long "input string." Aix Patch available Fix from $1,9502009-03-04 HIGH 9.0 CVE-2009-0505 The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Application Server (CICSAS) after an… Txseries Patch available Fix from $1,9502009-02-25 MEDIUM 6.2 CVE-2009-0506 Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 Identity Assertion is enabled a… Websphere Application Server Patch available Fix from $1,6002009-02-25 HIGH 7.2 CVE-2009-0439 Unspecified vulnerability in the queue manager in IBM WebSphere MQ (WMQ) 5.3, 6.0 before 6.0.2.6, and 7.0 before 7.0.0.2 allows local users to gain p… Websphere Mq Patch available Fix from $1,9502009-02-24 MEDIUM 6.5 CVE-2009-0440 IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authe… Websphere Partner Gateway Patch available Fix from $1,6002009-02-22 MEDIUM 5.0 CVE-2008-4285 Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Container component in IBM WebSphere A… Websphere Application Server Patch available Fix from $1,6002009-02-17 HIGH 10.0 CVE-2008-4283 CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remot… Websphere Application Server after 5.1.1.19 Fix from $1,9502009-02-10 HIGH 7.2 CVE-2009-0436 The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Ser… Websphere Application Server Patch available Fix from $1,9502009-02-10