Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Total 7009 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0747 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
Buffer overflow in lsmcode in AIX 4.3.3.
CVE-2002-0746 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.
CVE-2002-0745 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
Buffer overflow in uucp in AIX 4.3.3.
CVE-2002-0744 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow.
CVE-2002-0743 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.
CVE-2002-0742 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
Buffer overflow in pioout on AIX 4.3.3.
CVE-2002-0555 1 Ibm 1 Informix Web Datablade 2008-09-05 7.5 HIGH N/A
IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.
CVE-2002-0554 1 Ibm 1 Informix Web Datablade 2008-09-05 7.5 HIGH N/A
webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.
CVE-2002-0541 1 Ibm 1 Tivoli Storage Manager 2008-09-05 7.5 HIGH N/A
Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581.
CVE-2002-0037 1 Ibm 1 Lotus Domino Server 2008-09-05 7.5 HIGH N/A
Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.
CVE-2001-1557 1 Ibm 1 Aix 2008-09-05 7.5 HIGH N/A
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
CVE-2001-1554 1 Ibm 1 Aix 2008-09-05 5.0 MEDIUM N/A
IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets.
CVE-2001-1529 1 Ibm 1 Aix 2008-09-05 7.5 HIGH N/A
Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the vendor advisory, it is not clear if this is the same issue as CVE-2001-0779.
CVE-2001-1330 1 Ibm 1 Aix 2008-09-05 7.2 HIGH N/A
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
CVE-2001-1191 1 Ibm 1 Tivoli Secureway Policy Director 2008-09-05 5.0 MEDIUM N/A
WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.
CVE-2001-1189 1 Ibm 1 Websphere Application Server 2008-09-05 4.6 MEDIUM N/A
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.
CVE-2001-1143 1 Ibm 1 Db2 Universal Database 2008-09-05 5.0 MEDIUM N/A
IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.
CVE-2001-1061 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
CVE-2001-0671 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.
CVE-2001-0390 1 Ibm 3 Net.commerce, Net.commerce Hosting Server, Websphere Application Server 2008-09-05 5.0 MEDIUM N/A
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.