Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2005-2238 1Ibm 1Aix Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by using all ephemeral ports.
CVE-2005-2236 1Ibm 1Aix Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments.
CVE-2005-2235 1Ibm 1Aix Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments.
CVE-2005-2233 1Ibm 1Aix Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other hard-linked files including (2) pdisable, (3)...Show more Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other hard-linked files including (2) pdisable, (3) pstart, (4) phold, (5) pdelay, or (6) pshare.Show less
CVE-2005-2232 1Ibm 1Aix Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line argument.
CVE-2005-2170 1Ibm 1Tivoli Management Framework Apr 16, 2026 Jul 11, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The LCF component (lcfd) in IBM Tivoli Management Framework Endpoint allows remote attackers to cause a denial of service (process exit and connection loss) by connecting to LCF and ending the connection without sending...Show more The LCF component (lcfd) in IBM Tivoli Management Framework Endpoint allows remote attackers to cause a denial of service (process exit and connection loss) by connecting to LCF and ending the connection without sending any data.Show less
CVE-2005-2175 1Ibm 1Lotus Notes Apr 16, 2026 Jul 9, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookie...Show more The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies.Show less
CVE-2005-2091 1Ibm 1Websphere Application Server Apr 16, 2026 Jul 5, 2005 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header...Show more IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebSphere to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."Show less
CVE-2005-2073 1Ibm 1Db2 Apr 16, 2026 Jun 29, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2 allows local users with SELECT privileges to conduct unauthorized activities and insert, update or delete table contents.
CVE-2005-1872 1Ibm 1Websphere Application Server Apr 16, 2026 Jun 3, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the global security option is enabled, allows remote attackers to execute arbitrary code.
CVE-2005-1442 1Ibm 1Lotus Notes Apr 16, 2026 May 3, 2005 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service (client crash) and possibly execute arbitrary code via the NOTES.INI file.
CVE-2005-1441 1Ibm 1Lotus Domino Apr 16, 2026 May 3, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a denial of service via the Notes protocol (NRPC).
CVE-2005-1405 1Ibm 1Lotus Notes Apr 16, 2026 May 3, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.
CVE-2005-1238 1Ibm 1Iseries As 400 Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname...Show more By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request.Show less
CVE-2005-1182 1Ibm 1Os 400 Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510, R520, and R530 allows attackers to cause a denial of service (IRC shutdown) via certain inputs.
CVE-2005-1176 1Ibm 1Aix Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 1.2 LOW· v2 Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different file, which could leak sensitive information.
CVE-2005-1133 1Ibm 1Iseries As 400 Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server.
CVE-2005-1112 1Ibm 1Websphere Application Server Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host...Show more IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine.Show less
CVE-2005-1101 1Ibm 1Lotus Domino Server Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via large amounts of data in certain (1) time o...Show more Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via large amounts of data in certain (1) time or (2) date fields.Show less
CVE-2005-1037 1Ibm 1Aix Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 10.0 HIGH· v2 Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.

Previous 1...396397398...413 Next