Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-6363 1Ibm 1Tivoli Netcool Security Manager Apr 23, 2026 Dec 15, 2007 N/A· v4 N/A· v3 2.1 LOW· v2 IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory (AD) LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password.
CVE-2007-6305 1Ibm 1Hardware Management Console Apr 23, 2026 Dec 10, 2007 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileges via "some HMC commands."
CVE-2007-6295 1Ibm 1Lotus Sametime Apr 23, 2026 Dec 10, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI.
CVE-2007-6294 1Ibm 1Hardware Management Console Apr 23, 2026 Dec 10, 2007 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges via "some HMC commands."
CVE-2007-6293 1Ibm 1Hardware Management Console Apr 23, 2026 Dec 10, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow attackers to gain privileges via "some HMC commands."
CVE-2007-6219 1Ibm 1Tivoli Netcool Security Manager Apr 23, 2026 Dec 4, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2007-5612 1Ibm 1Director Apr 23, 2026 Nov 21, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service (CPU consumption, connection slot exhaustion, and daemon crash) via a large number of idle connections.
CVE-2007-6053 1Ibm 1Db2 Universal Database Apr 23, 2026 Nov 20, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unknown impact involving "memory corruption." NOTE: the vendor description of this...Show more IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unknown impact involving "memory corruption." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.Show less
CVE-2007-6052 1Ibm 1Db2 Universal Database Apr 23, 2026 Nov 20, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (divide-by-zero error and DBMS crash), related to an "overflow." NOTE: the vendor des...Show more IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (divide-by-zero error and DBMS crash), related to an "overflow." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.Show less
CVE-2007-6051 1Ibm 1Db2 Universal Database Apr 23, 2026 Nov 20, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impact. NOTE: the vendor description of this issue is too vague to be certain that...Show more IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impact. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.Show less
CVE-2007-6050 1Ibm 1Db2 Universal Database Apr 23, 2026 Nov 20, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related to creation of an "insecure directory."
CVE-2007-6049 1Ibm 1Db2 Universal Database Apr 23, 2026 Nov 20, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, involving a call to dlopen when the effective uid is root.
CVE-2007-6048 1Ibm 1Db2 Universal Database Apr 23, 2026 Nov 20, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors. NOTE: the vendor description of this issue is too vague to be certain that it is security...Show more IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.Show less
CVE-2007-6047 1Ibm 1Db2 Universal Database Apr 23, 2026 Nov 20, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 instance owner, related to invocation of TPUT by DB2DART.
CVE-2007-6046 1Ibm 1Db2 Universal Database Apr 23, 2026 Nov 20, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in unspecified setuid programs in IBM DB2 UDB 9.1 before Fixpak 4 allows local users to have an unknown impact.
CVE-2007-6045 1Ibm 1Db2 Universal Database Apr 23, 2026 Nov 20, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors.
CVE-2007-6044 1Ibm 1Websphere Mq Apr 23, 2026 Nov 20, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote attack vectors involving "memory corruption." NOTE: as of 20071116, the only disclosure is a vague pre-advisory with no actionab...Show more Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote attack vectors involving "memory corruption." NOTE: as of 20071116, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.Show less
CVE-2007-5957 1Ibm 1Informix Dynamic Server Apr 23, 2026 Nov 14, 2007 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers to cause a denial of service (application crash) via unspecified SQ_ONASSIST requests.
CVE-2007-5956 1Ibm 1Informix Dynamic Server Apr 23, 2026 Nov 14, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLAN...Show more Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable.Show less
CVE-2007-5949 1Ibm 1Tivoli Service Desk Apr 23, 2026 Nov 14, 2007 N/A· v4 N/A· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action.

Previous 1...383384385...413 Next