Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-1798 1Ibm 1Aix Apr 23, 2026 Apr 2, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long path name.
CVE-2007-1784 1Ibm 1Lotus Sametime Apr 23, 2026 Mar 31, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrar...Show more The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function.Show less
CVE-2006-4843 1Ibm 1Lotus Domino Apr 23, 2026 Mar 29, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified "code...Show more Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified "code sequences" that bypass the protection scheme.Show less
CVE-2007-1739 1Ibm 1Lotus Domino Apr 23, 2026 Mar 28, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service (crash) via a long, malformed DN request, which causes only the...Show more Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service (crash) via a long, malformed DN request, which causes only the lower 16 bits of the string length to be used in memory allocation.Show less
CVE-2007-1675 1Ibm 1Lotus Domino Apr 23, 2026 Mar 28, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.
CVE-2007-1608 1Ibm 1Websphere Application Server Apr 23, 2026 Mar 22, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a...Show more CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.Show less
CVE-2006-7166 1Ibm 1Websphere Application Server Apr 23, 2026 Mar 20, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via "a specific JSP URL."
CVE-2006-7165 1Ibm 1Websphere Application Server Apr 23, 2026 Mar 20, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 allows remote attackers to obtain JSP source code and other sensitive information via certain "special URIs."
CVE-2006-7164 1Ibm 1Websphere Application Server Apr 23, 2026 Mar 20, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does not issue a security challenge, which allows remote attackers to read secure file...Show more SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does not issue a security challenge, which allows remote attackers to read secure files and obtain sensitive information via certain requests.Show less
CVE-2007-1468 1Ibm 1Rational Clearquest Apr 23, 2026 Mar 16, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest (CQ) Web 7.0.0.0 allows remote attackers to inject arbitrary web script or HTML via an attachment to a defect log entry.
CVE-2007-1228 1Ibm 1Db2 Apr 23, 2026 Mar 2, 2007 N/A· v4 N/A· v3 4.4 MEDIUM· v2 IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories.
CVE-2007-1089 1Ibm 1Db2 Universal Database Apr 23, 2026 Feb 23, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and DELETE SQL commands via unknown vectors.
CVE-2007-1088 1Ibm 1Db2 Apr 23, 2026 Feb 23, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables.
CVE-2007-1087 1Ibm 1Db2 Apr 23, 2026 Feb 23, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-b...Show more IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow.Show less
CVE-2007-1086 1Ibm 1Db2 Universal Database Apr 23, 2026 Feb 23, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modify arbitrary files via unspecified environment variables related to "unsafe file access."
CVE-2007-1027 1Ibm 1Db2 Apr 23, 2026 Feb 21, 2007 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file.
CVE-2007-0978 1Ibm 1Aix Apr 23, 2026 Feb 16, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in swcons in IBM AIX 5.3 allows local users to gain privileges via long input data.
CVE-2007-0977 1Ibm 1Lotus Domino Apr 23, 2026 Feb 16, 2007 N/A· v4 N/A· v3 7.1 HIGH· v2 IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view,...Show more IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428.Show less
CVE-2007-0670 1Ibm 1Aix Apr 23, 2026 Feb 3, 2007 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including (1) rdist, (2) rsh, (3) rcp, (4) rsync, and (5) rlogin.
CVE-2007-0618 1Ibm 1Aix Apr 23, 2026 Jan 31, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in (1) pop3d, (2) pop3ds, (3) imapd, and (4) imapds in IBM AIX 5.3.0 has unspecified impact and attack vectors, involving an "authentication vulnerability."

Previous 1...411412413...436 Next