Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-3960 1Ibm 1Websphere Application Server Apr 23, 2026 Jul 24, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unknown impact and attack vectors, aka (1) PK33799, or (2) a "Potential security exposure" in the Samples...Show more Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unknown impact and attack vectors, aka (1) PK33799, or (2) a "Potential security exposure" in the Samples component (PK40213).Show less
CVE-2007-3268 1Ibm 1Tivoli Provisioning Manager Os Deployment Apr 23, 2026 Jul 18, 2007 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service (rembo.exe crash and multiple service outage) via a read (RRQ) reque...Show more The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service (rembo.exe crash and multiple service outage) via a read (RRQ) request with an invalid blksize (blocksize), which triggers a divide-by-zero error.Show less
CVE-2007-3831 1Ibm 2Proventia Network Ips Gx5008 Proventia Network Ips Gx5108 Apr 23, 2026 Jul 17, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
CVE-2007-3830 1Ibm 2Proventia Network Ips Gx5008 Proventia Network Ips Gx5108 Apr 23, 2026 Jul 17, 2007 N/A· v4 N/A· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter.
CVE-2007-3680 1Ibm 1Aix Apr 23, 2026 Jul 11, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Stack-based buffer overflow in the odm_searchpath function in libodm in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long ODMPATH environment variable.
CVE-2007-3537 1Ibm 1Os 400 Apr 23, 2026 Jul 3, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules.
CVE-2007-3397 1Ibm 1Websphere Application Server Apr 23, 2026 Jun 26, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The web container in IBM WebSphere Application Server (WAS) before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which...Show more The web container in IBM WebSphere Application Server (WAS) before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information.Show less
CVE-2007-3265 1Ibm 1Websphere Application Server Apr 23, 2026 Jun 19, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Samples component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2007-3264 1Ibm 1Websphere Application Server Apr 23, 2026 Jun 19, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors.
CVE-2007-3263 1Ibm 1Websphere Application Server Apr 23, 2026 Jun 19, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface...Show more Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."Show less
CVE-2007-3262 1Ibm 1Websphere Application Server Apr 23, 2026 Jun 19, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier allows remote attackers to cause a denial of service related to a thread hang, and possibly relat...Show more Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier allows remote attackers to cause a denial of service related to a thread hang, and possibly related to a "TCP issue," or to MPAlarmThread and a resultant memory leak.Show less
CVE-2007-3128 1Ibm 1Websphere Portal Apr 23, 2026 Jun 19, 2007 N/A· v4 N/A· v3 6.4 MEDIUM· v2 SQL injection vulnerability in content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVE-2007-3127 1Ibm 1Websphere Portal Apr 23, 2026 Jun 19, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information via a "';" (quote semicolon) sequence in the page parameter, which reveals the installation path in...Show more content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information via a "';" (quote semicolon) sequence in the page parameter, which reveals the installation path in the resulting forced SQL error message.Show less
CVE-2007-3232 1Ibm 1Totalstorage Ds400 Apr 23, 2026 Jun 15, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, (3) manager, (4) administrator, and (5) operator accounts, which allows remote attackers to gain login access via certain Li...Show more The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, (3) manager, (4) administrator, and (5) operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000.Show less
CVE-2007-0068 1Ibm 1Lotus Domino Apr 23, 2026 Jun 6, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server d...Show more IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database.Show less
CVE-2007-0067 1Ibm 1Lotus Domino Web Server Apr 23, 2026 Jun 6, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service (daemon crash) via requests for URLs that reference certain fi...Show more Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service (daemon crash) via requests for URLs that reference certain files.Show less
CVE-2007-2996 1Ibm 1Aix Apr 23, 2026 Jun 4, 2007 N/A· v4 N/A· v3 6.6 MEDIUM· v2 Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users to gain privileges via unspecified vectors related to the installation and "wai...Show more Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users to gain privileges via unspecified vectors related to the installation and "waiting for a legitimate user to execute a binary that ships with Perl."Show less
CVE-2007-2995 1Ibm 1Aix Apr 23, 2026 Jun 4, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in sysmgt.websm.rte in IBM AIX 5.2.0 and 5.3.0 has unknown impact and attack vectors.
CVE-2007-2582 1Ibm 1Db2 Apr 23, 2026 May 10, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a...Show more Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via (2) an invalid LANG parameter or (2) a long packet that generates a "MemTree overflow."Show less
CVE-2006-7198 1Ibm 1Websphere Application Server Apr 23, 2026 Apr 30, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 5.1.1.14, and WAS for z/OS 601 before 6.0.2.13, has unknown impact and attack vectors, related to a "Potential security exposure," aka PK26123.

Previous 1...387388389...413 Next