Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-4270 1Ibm 1Db2 Universal Database Apr 23, 2026 Aug 18, 2007 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain files.
CVE-2007-4368 1Ibm 1Rational Clearquest Apr 23, 2026 Aug 15, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter in a GenerateMainFrame command.
CVE-2007-4355 1Ibm 1Aix Apr 23, 2026 Aug 15, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the at program on IBM AIX 5.3 allows local users to gain privileges via unspecified vectors.
CVE-2007-4354 1Ibm 1Aix Apr 23, 2026 Aug 15, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in fileplace in bos.perf.tools in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors.
CVE-2007-4353 1Ibm 1Aix Apr 23, 2026 Aug 15, 2007 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.
CVE-2007-4309 1Ibm 1Lotus Notes Apr 23, 2026 Aug 13, 2007 N/A· v4 N/A· v3 3.5 LOW· v2 IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.id password by setting the notes.ini (1) KFM_ShowEntropy and (2) Debug_Outfile debug variables, a dif...Show more IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.id password by setting the notes.ini (1) KFM_ShowEntropy and (2) Debug_Outfile debug variables, a different vulnerability than CVE-2005-2696.Show less
CVE-2007-4238 1Ibm 1Aix Apr 23, 2026 Aug 8, 2007 N/A· v4 N/A· v3 6.9 MEDIUM· v2 AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to gain root privileges by modifying pioinit.
CVE-2007-4237 1Ibm 1Aix Apr 23, 2026 Aug 8, 2007 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Buffer overflow in the atm subset in arp in devices.common.IBM.atm.rte in AIX 5.2 and 5.3 allows local users to gain root privileges.
CVE-2007-4236 1Ibm 1Aix Apr 23, 2026 Aug 8, 2007 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Buffer overflow in lpd in bos.rte.printers in AIX 5.2 and 5.3 allows local users with printq group privileges to gain root privileges.
CVE-2007-4228 1Ibm 1Aix Apr 23, 2026 Aug 8, 2007 N/A· v4 N/A· v3 4.7 MEDIUM· v2 rmpvc on IBM AIX 4.3 allows local users to cause a denial of service (system crash) via long port logical name (-l) argument.
CVE-2007-4142 1Ibm 1Lotus Sametime Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting.
CVE-2007-4004 1Ibm 1Aix Apr 23, 2026 Jul 26, 2007 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on A...Show more Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries.Show less
CVE-2007-4003 1Ibm 1Aix Apr 23, 2026 Jul 26, 2007 N/A· v4 N/A· v3 6.9 MEDIUM· v2 pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R (ParseRoutine) command line argument.
CVE-2007-3333 1Ibm 1Aix Apr 23, 2026 Jul 26, 2007 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code via a large number of terminal control sequences.
CVE-2007-3960 1Ibm 1Websphere Application Server Apr 23, 2026 Jul 24, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unknown impact and attack vectors, aka (1) PK33799, or (2) a "Potential security exposure" in the Samples...Show more Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unknown impact and attack vectors, aka (1) PK33799, or (2) a "Potential security exposure" in the Samples component (PK40213).Show less
CVE-2007-3268 1Ibm 1Tivoli Provisioning Manager Os Deployment Apr 23, 2026 Jul 18, 2007 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service (rembo.exe crash and multiple service outage) via a read (RRQ) reque...Show more The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service (rembo.exe crash and multiple service outage) via a read (RRQ) request with an invalid blksize (blocksize), which triggers a divide-by-zero error.Show less
CVE-2007-3831 1Ibm 2Proventia Network Ips Gx5008 Proventia Network Ips Gx5108 Apr 23, 2026 Jul 17, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
CVE-2007-3830 1Ibm 2Proventia Network Ips Gx5008 Proventia Network Ips Gx5108 Apr 23, 2026 Jul 17, 2007 N/A· v4 N/A· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter.
CVE-2007-3680 1Ibm 1Aix Apr 23, 2026 Jul 11, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Stack-based buffer overflow in the odm_searchpath function in libodm in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long ODMPATH environment variable.
CVE-2007-3537 1Ibm 1Os 400 Apr 23, 2026 Jul 3, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules.

Previous 1...409410411...436 Next