Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-2137 1Ibm 1Tivoli Monitoring Express Apr 23, 2026 Apr 22, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in kde.dll in IBM Tivoli Monitoring Express 6.1.0 before Fix Pack 2, as used in Tivoli Universal Agent, Windows OS Monitoring agent, and Enterprise Portal Server, allows remote attackers to exe...Show more Heap-based buffer overflow in kde.dll in IBM Tivoli Monitoring Express 6.1.0 before Fix Pack 2, as used in Tivoli Universal Agent, Windows OS Monitoring agent, and Enterprise Portal Server, allows remote attackers to execute arbitrary code by sending a long string to a certain TCP port.Show less
CVE-2007-1945 1Ibm 1Websphere Application Server Apr 23, 2026 Apr 11, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in the Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) before 6.1.0.7 has unknown impact and attack vectors.
CVE-2007-1944 1Ibm 1Websphere Application Server Apr 23, 2026 Apr 11, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Java Message Service (JMS) in IBM WebSphere Application Server (WAS) before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release [of] a bytebuffer input stream," pos...Show more The Java Message Service (JMS) in IBM WebSphere Application Server (WAS) before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release [of] a bytebuffer input stream," possibly a double free vulnerability.Show less
CVE-2007-1941 1Ibm 1Lotus Notes Apr 23, 2026 Apr 11, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or...Show more Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message, a different issue than CVE-2006-4843.Show less
CVE-2007-1940 1Ibm 1Tivoli Business Service Manager Apr 23, 2026 Apr 11, 2007 N/A· v4 N/A· v3 4.9 MEDIUM· v2 IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.
CVE-2007-1868 1Ibm 1Tivoli Provisioning Manager Os Deployment Apr 23, 2026 Apr 4, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to execute arbitrary cod...Show more The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via crafted POST requests to port 8080/tcp or 443/tcp.Show less
CVE-2007-1798 1Ibm 1Aix Apr 23, 2026 Apr 2, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long path name.
CVE-2007-1784 1Ibm 1Lotus Sametime Apr 23, 2026 Mar 31, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrar...Show more The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function.Show less
CVE-2006-4843 1Ibm 1Lotus Domino Apr 23, 2026 Mar 29, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified "code...Show more Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified "code sequences" that bypass the protection scheme.Show less
CVE-2007-1739 1Ibm 1Lotus Domino Apr 23, 2026 Mar 28, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service (crash) via a long, malformed DN request, which causes only the...Show more Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service (crash) via a long, malformed DN request, which causes only the lower 16 bits of the string length to be used in memory allocation.Show less
CVE-2007-1675 1Ibm 1Lotus Domino Apr 23, 2026 Mar 28, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.
CVE-2007-1608 1Ibm 1Websphere Application Server Apr 23, 2026 Mar 22, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a...Show more CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.Show less
CVE-2006-7166 1Ibm 1Websphere Application Server Apr 23, 2026 Mar 20, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via "a specific JSP URL."
CVE-2006-7165 1Ibm 1Websphere Application Server Apr 23, 2026 Mar 20, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 allows remote attackers to obtain JSP source code and other sensitive information via certain "special URIs."
CVE-2006-7164 1Ibm 1Websphere Application Server Apr 23, 2026 Mar 20, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does not issue a security challenge, which allows remote attackers to read secure file...Show more SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does not issue a security challenge, which allows remote attackers to read secure files and obtain sensitive information via certain requests.Show less
CVE-2007-1468 1Ibm 1Rational Clearquest Apr 23, 2026 Mar 16, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest (CQ) Web 7.0.0.0 allows remote attackers to inject arbitrary web script or HTML via an attachment to a defect log entry.
CVE-2007-1228 1Ibm 1Db2 Apr 23, 2026 Mar 2, 2007 N/A· v4 N/A· v3 4.4 MEDIUM· v2 IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories.
CVE-2007-1089 1Ibm 1Db2 Universal Database Apr 23, 2026 Feb 23, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and DELETE SQL commands via unknown vectors.
CVE-2007-1088 1Ibm 1Db2 Apr 23, 2026 Feb 23, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables.
CVE-2007-1087 1Ibm 1Db2 Apr 23, 2026 Feb 23, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-b...Show more IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow.Show less

Previous 1...388389390...413 Next