Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Total 7009 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-3643 1 Ibm 1 Db2 Universal Database 2008-09-05 7.5 HIGH N/A
IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying a password.
CVE-2005-3642 1 Ibm 1 Informix Dynamic Database Server 2008-09-05 7.5 HIGH N/A
IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username.
CVE-2005-3289 1 Ibm 1 Aix 2008-09-05 2.1 LOW N/A
LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file.
CVE-2005-3015 1 Ibm 2 Lotus Domino, Lotus Domino Enterprise Server 2008-09-05 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) BaseTarget or (2) Src parameters.
CVE-2005-2238 1 Ibm 1 Aix 2008-09-05 2.1 LOW N/A
ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by using all ephemeral ports.
CVE-2005-2237 1 Ibm 1 Aix 2008-09-05 7.2 HIGH N/A
Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via long command line arguments.
CVE-2005-2236 1 Ibm 1 Aix 2008-09-05 7.2 HIGH N/A
Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments.
CVE-2005-2235 1 Ibm 1 Aix 2008-09-05 7.2 HIGH N/A
Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments.
CVE-2005-2234 1 Ibm 1 Aix 2008-09-05 7.2 HIGH N/A
Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments.
CVE-2005-2233 1 Ibm 1 Aix 2008-09-05 7.2 HIGH N/A
Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other hard-linked files including (2) pdisable, (3) pstart, (4) phold, (5) pdelay, or (6) pshare.
CVE-2005-2232 1 Ibm 1 Aix 2008-09-05 4.6 MEDIUM N/A
Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line argument.
CVE-2005-2175 1 Ibm 1 Lotus Notes 2008-09-05 5.0 MEDIUM N/A
The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies.
CVE-2005-2073 1 Ibm 1 Db2 2008-09-05 2.1 LOW N/A
Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2 allows local users with SELECT privileges to conduct unauthorized activities and insert, update or delete table contents.
CVE-2005-1037 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.
CVE-2005-0991 1 Ibm 1 Aix 2008-09-05 2.1 LOW N/A
RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impact, probably by overwriting files.
CVE-2005-0539 1 Ibm 1 Hardware Management Console 2008-09-05 4.6 MEDIUM N/A
Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard.
CVE-2005-0425 1 Ibm 1 Websphere Application Server 2008-09-05 5.0 MEDIUM N/A
Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.
CVE-2004-2667 1 Ibm 1 Lotus Domino 2008-09-05 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVE-2004-2281 1 Ibm 1 Lotus Notes 2008-09-05 10.0 HIGH N/A
Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by (1) KSPR5YS6GR and (2) KSPR62F4D3.
CVE-2004-2280 1 Ibm 1 Lotus Notes 2008-09-05 5.0 MEDIUM N/A
Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets, as identified by KSPR62F4KN.