Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-5835 1Ibm 1Lotus Notes Apr 23, 2026 Nov 10, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID...Show more The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file.Show less
CVE-2006-5818 1Ibm 1Lotus Domino Apr 23, 2026 Nov 8, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users to gain privileges and execute arbitrary code via unspecified vectors.
CVE-2006-5664 1Ibm 3Informix Client Sdk Informix Dynamic ServerInformix I Connect Apr 23, 2026 Nov 3, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to "compromise security" via a symlink attack on temporar...Show more The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to "compromise security" via a symlink attack on temporary files.Show less
CVE-2006-5663 1Ibm 3Informix Client Sdk Informix Dynamic ServerInformix I Connect Apr 23, 2026 Nov 3, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modif...Show more IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modifying the scripts.Show less
CVE-2006-5324 1Ibm 1Websphere Application Server Apr 23, 2026 Oct 17, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374.
CVE-2006-5323 1Ibm 1Websphere Application Server Apr 23, 2026 Oct 17, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a "possible security exposure," aka PK29360.
CVE-2006-5163 1Ibm 1Informix Dynamic Server Apr 23, 2026 Oct 5, 2006 N/A· v4 N/A· v3 3.6 LOW· v2 IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.
CVE-2006-5161 1Ibm 1Client Security Password Manager Apr 23, 2026 Oct 5, 2006 N/A· v4 N/A· v3 6.4 MEDIUM· v2 IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML pa...Show more IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page.Show less
CVE-2006-5011 1Ibm 1Aix Apr 23, 2026 Sep 27, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Untrusted search path vulnerability in snappd in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via a Trojan horse program, involving the "system subroutine".
CVE-2006-5010 1Ibm 1Aix Apr 23, 2026 Sep 27, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Untrusted search path vulnerability in acctctl in IBM AIX 5.3.0 allows local users to execute arbitrary commands by modifying the path to point to a malicious mkdir program.
CVE-2006-5009 1Ibm 1Aix Apr 23, 2026 Sep 27, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in xlock in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands and overwrite arbitrary files via unspecified vectors, possibly involving a buffer overflow.
CVE-2006-5008 1Ibm 1Aix Apr 23, 2026 Sep 27, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in utape in IBM AIX 5.2.0 and 5.3.0 allows attackers to execute arbitrary commands and overwrite arbitrary files via unspecified vectors.
CVE-2006-5007 1Ibm 1Aix Apr 23, 2026 Sep 27, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Untrusted search path vulnerability in uucp in IBM AIX 5.2.0 and 5.3.0 allows local users to local users to gain privileges via a Trojan horse program involving uux.
CVE-2006-5006 1Ibm 1Aix Apr 23, 2026 Sep 27, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in cfgmgr in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long directory path argument.
CVE-2006-5005 1Ibm 1Aix Apr 23, 2026 Sep 27, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors involving /etc/slip.login.
CVE-2006-5004 1Ibm 1Aix Apr 23, 2026 Sep 27, 2006 N/A· v4 N/A· v3 2.1 LOW· v2 Unspecified vulnerability in the rdist command in IBM AIX 5.2.0 and 5.3.0 allows local users to overwrite arbitrary files via unspecified vectors.
CVE-2006-5003 1Ibm 1Aix Apr 16, 2026 Sep 27, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in the named8 command in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors.
CVE-2006-5002 1Ibm 1Inventory Scout Apr 16, 2026 Sep 27, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 (invscoutClient_VPD_Survey) allows attackers to overwrite arbitrary files via unspecified vectors.
CVE-2006-4763 1Ibm 1Lotus Domino Web Access Apr 16, 2026 Sep 13, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the Ltp...Show more IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.Show less
CVE-2006-4683 1Ibm 1Director Apr 16, 2026 Sep 11, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.

Previous 1...390391392...413 Next