Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-3853 1Ibm 1Informix Dynamic Server Apr 16, 2026 Aug 8, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username.
CVE-2006-3778 1Ibm 1Lotus Notes Apr 16, 2026 Jul 24, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or (2) a "," (comma) is inside the "phrase" portion of an addres...Show more IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or (2) a "," (comma) is inside the "phrase" portion of an address, which can cause the e-mail to be sent to users that were deleted from the To, CC, and BCC fields, which allows remote attackers to obtain the list of original recipients.Show less
CVE-2006-3569 1Ibm 1Network Appliance Data Ontap Apr 16, 2026 Jul 13, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Filers and other products, allows unauthorized users to gain access to privileged c...Show more Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Filers and other products, allows unauthorized users to gain access to privileged commands via unknown vectors, probably related to incorrect capabilities with the audit role.Show less
CVE-2006-3232 1Ibm 1Websphere Application Server Apr 16, 2026 Jun 27, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM WebSphere Application Server before 6.0.2.11 has unknown impact and attack vectors because the "UserNameToken cache was improperly used."
CVE-2006-3231 1Ibm 1Websphere Application Server Apr 16, 2026 Jun 27, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with speci...Show more Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."Show less
CVE-2006-3068 1Ibm 1Db2 Universal Database Apr 16, 2026 Jun 19, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows remote attackers to cause a denial of service (application crash) by sending "incorrect information ... regarding the package name/creator," which leads to a "...Show more IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows remote attackers to cause a denial of service (application crash) by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."Show less
CVE-2006-3067 1Ibm 1Db2 Universal Database Apr 16, 2026 Jun 19, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of service (application crash) via a (1) "long column list" in the (a) REPLACE INTO a...Show more Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of service (application crash) via a (1) "long column list" in the (a) REPLACE INTO and (b) INSERT INTO portions of the LOAD command or a (2) large number of values in an IN clause, possibly related to a buffer overflow.Show less
CVE-2006-3066 1Ibm 1Db2 Universal Database Apr 16, 2026 Jun 19, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allows remote attackers to cause a denial of service (application crash) via a long MGRLVLLS message inside of an EXCSAT mes...Show more Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allows remote attackers to cause a denial of service (application crash) via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection.Show less
CVE-2006-2647 1Ibm 1Aix Apr 16, 2026 May 30, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.
CVE-2006-2436 1Ibm 1Websphere Application Server Apr 16, 2026 May 17, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
CVE-2006-2435 1Ibm 1Websphere Application Server Apr 16, 2026 May 17, 2006 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to "Inserting certain script tags in urls [that] may allow unintended...Show more Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to "Inserting certain script tags in urls [that] may allow unintended execution of scripts."Show less
CVE-2006-2434 1Ibm 1Websphere Application Server Apr 16, 2026 May 17, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in WebSphere 5.1.1 (or any earlier cumulative fix) Common Configuration Mode + CommonArchive and J2EE Models might allow attackers to obtain sensitive information via the trace.
CVE-2006-2433 1Ibm 1Websphere Application Server Apr 16, 2026 May 17, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and attack vectors related to the "administrative console".
CVE-2006-2432 1Ibm 1Websphere Application Server Apr 16, 2026 May 17, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token.
CVE-2006-2431 1Ibm 1Websphere Application Server Apr 16, 2026 May 17, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows rem...Show more Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page. NOTE: some sources have reported the element as "faultfactor," but this is likely erroneous.Show less
CVE-2006-2430 1Ibm 1Websphere Application Server Apr 16, 2026 May 17, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNode.log, which allows attackers to gain privileges.
CVE-2006-2429 1Ibm 1Websphere Application Server Apr 16, 2026 May 17, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and remote attack vectors related to "HTTP request handlers".
CVE-2006-2342 1Ibm 1Websphere Application Server Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 IBM WebSphere Application Server 6.0.2 before FixPack 3 allows remote attackers to bypass authentication for the Welcome Page via a request to the default context root.
CVE-2006-1948 1Ibm 1Lotus Notes Apr 16, 2026 Apr 20, 2006 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messa...Show more The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted remote attackers to trick a user into sending e-mail to an unauthorized recipient.Show less
CVE-2006-1247 1Ibm 1Aix Apr 16, 2026 Apr 19, 2006 N/A· v4 N/A· v3 3.3 LOW· v2 rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Previous 1...392393394...413 Next