← Back

Ibm

ibm

9,039 CVEs • 1,615 products

Products (1,615)

Click to collapse
Toggle
Aix
aix
Db2
db2
Vios
vios
I
i
Websphere Mq
websphere_mq
Lotus Domino
lotus_domino
Api Connect
api_connect
Concert
concert
Lotus Notes
lotus_notes
Mq
mq
Aspera Faspex
aspera_faspex
Mq Appliance
mq_appliance
Sametime
sametime
Cics Tx
cics_tx
Connections
connections

CVEs (9,039)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ibm
1Informix Web Datablade
Apr 16, 2026
Jul 3, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.
1Ibm
1Tivoli Storage Manager
Apr 16, 2026
Jul 3, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly e...Show more
Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581.Show less
1Ibm
1Aix
Apr 16, 2026
Apr 22, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.
1Ibm
1Lotus Domino Server
Apr 16, 2026
Apr 22, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.
1Ibm
1Aix Parallel Systems Support Programs
Apr 16, 2026
Apr 1, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection.
1Ibm
1Lotus Domino
Apr 16, 2026
Mar 15, 2002
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.
1Ibm
1Aix
Apr 16, 2026
Mar 8, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump).
1Ibm
1Aix
Apr 16, 2026
Feb 13, 2002
N/A· v4
N/A· v3
3.6 LOW· v2
create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.
1Ibm
2Lotus Domino
Lotus Domino Server
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "...Show more
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.Show less
1Ibm
1Aix
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
1Ibm
1Aix
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets.
1Ibm
1Aix
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the vendor advisory, it is not clear if this is the same issue as...Show more
Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the vendor advisory, it is not clear if this is the same issue as CVE-2001-0779.Show less
1Ibm
1Lotus Notes
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.
1Ibm
1Aix
Apr 16, 2026
Dec 21, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system.
1Ibm
1Websphere Application Server
Apr 16, 2026
Dec 13, 2001
N/A· v4
N/A· v3
4.6 MEDIUM· v2
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.
5Hp
IbmSco+2 more
6Aix
Hp UxIrix+3 more
Apr 16, 2026
Dec 12, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
1Ibm
1Tivoli Secureway Policy Director
Apr 16, 2026
Dec 11, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.
1Ibm
14758
Apr 16, 2026
Dec 6, 2001
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Key_Parts permissions, to steal DES and 3DES keys by using a brute force attack to create a 3DES expor...Show more
Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Key_Parts permissions, to steal DES and 3DES keys by using a brute force attack to create a 3DES exporter key.Show less
1Ibm
1Websphere Application Server
Apr 16, 2026
Dec 6, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/...Show more
Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.Show less
1Ibm
1Aix
Apr 16, 2026
Dec 6, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.