← Back

Ibm

ibm

9,039 CVEs • 1,615 products

Products (1,615)

Click to collapse
Toggle
Aix
aix
Db2
db2
Vios
vios
I
i
Websphere Mq
websphere_mq
Lotus Domino
lotus_domino
Api Connect
api_connect
Concert
concert
Lotus Notes
lotus_notes
Mq
mq
Aspera Faspex
aspera_faspex
Mq Appliance
mq_appliance
Sametime
sametime
Cics Tx
cics_tx
Connections
connections

CVEs (9,039)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ibm
1Informix Web Datablade
Apr 16, 2026
Nov 22, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter.
1Ibm
1Aix
Apr 16, 2026
Oct 9, 2001
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.
1Ibm
1Aix
Apr 16, 2026
Oct 9, 2001
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.
1Ibm
2Aix
Hacmp
Apr 16, 2026
Sep 24, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send additional data, which causes a failure in snmpd.
2Hp
Ibm
2Openview Network Node Manager
Tivoli Netview
Apr 16, 2026
Sep 20, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.
1Ibm
2Websphere Application Server
Websphere Commerce Suite
Apr 16, 2026
Sep 19, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.
1Ibm
1Lotus Domino
Apr 16, 2026
Sep 19, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information...Show more
The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.Show less
1Ibm
1Aix
Apr 16, 2026
Aug 31, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
1Ibm
1Http Server Ssl Module Common
Apr 16, 2026
Aug 31, 2001
N/A· v4
N/A· v3
7.2 HIGH· v2
ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root...Show more
ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.Show less
9Debian
FreebsdIbm+6 more
11Aix
Debian LinuxFreebsd+8 more
Apr 16, 2026
Aug 14, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by t...Show more
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.Show less
1Ibm
1Aix
Apr 16, 2026
Aug 14, 2001
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable.
1Ibm
1Aix
Apr 16, 2026
Aug 2, 2001
N/A· v4
N/A· v3
4.6 MEDIUM· v2
lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the progr...Show more
lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory.Show less
1Ibm
1Tivoli Secureway Policy Director
Apr 16, 2026
Jul 23, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.
1Ibm
1Lotus Notes
Apr 16, 2026
Jul 21, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.
1Ibm
1Alphaworks Tftp Server
Apr 16, 2026
Jul 20, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack.
1Ibm
1Lotus Domino R5
Apr 16, 2026
Jul 16, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv...Show more
Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.Show less
1Ibm
1Lotus Domino R5
Apr 16, 2026
Jul 16, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
1Ibm
1Lotus Domino R5
Apr 16, 2026
Jul 16, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
1Ibm
1Secureway Directory
Apr 16, 2026
Jul 16, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suit...Show more
IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite.Show less
1Ibm
1Secureway Directory
Apr 16, 2026
Jul 16, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.