VYPR
← IBM

Vendor CVEs

IBM

All CVEs

8,825 total · sorted by risk
  • CVE-2011-1220Jun 2, 2011
    IBM
    Tivoli Management Framework
    risk 0.08cvss —epss 0.63

    Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field.

  • CVE-2010-4094Oct 26, 2010
    IBM
    Rational Quality Manager
    risk 0.08cvss —epss 0.65

    The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role. NOTE: this might overlap CVE-2009-3548.

  • CVE-2009-3699Oct 15, 2009
    IBM
    Aix
    risk 0.08cvss —epss 0.62

    Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.

  • CVE-2008-2240May 22, 2008
    IBM
    Lotus Domino
    risk 0.08cvss —epss 0.65

    Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.

  • CVE-2007-1868Apr 4, 2007
    IBM
    Tivoli Provisioning Manager OS Deployment
    risk 0.08cvss —epss 0.59

    The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via crafted…

  • CVE-2007-1675Mar 28, 2007
    IBM
    Lotus Domino
    risk 0.08cvss —epss 0.61

    Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.

  • CVE-2003-0694Oct 6, 2003
    Sendmail, Inc.
    Sendmail
    risk 0.08cvss —epss 0.66

    The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

  • CVE-2012-0202May 4, 2012
    IBM
    Cognos Tm1
    risk 0.07cvss —epss 0.55

    Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data.

  • CVE-2010-0557Feb 5, 2010
    IBM
    Cognos Express
    risk 0.07cvss —epss 0.51

    IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.

  • CVE-2007-4474Dec 27, 2007
    IBM
    Domino Web Access
    risk 0.07cvss —epss 0.44

    Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long…

  • CVE-2000-0505May 31, 2000
    Apache
    HTTP Server
    risk 0.07cvss —epss 0.47

    The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.

  • CVE-1999-0046Feb 6, 1997
    Bsdi
    BSD OS
    risk 0.07cvss —epss 0.52

    Buffer overflow of rlogin program using TERM environmental variable.

  • CVE-2013-5447Dec 10, 2013
    IBM
    Forms Viewer
    risk 0.06cvss —epss 0.34

    Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value.

  • CVE-2012-5946Apr 30, 2013
    IBM
    Spss Samplepower
    risk 0.06cvss —epss 0.34

    Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.

  • CVE-2012-2174Jun 20, 2012
    IBM
    Lotus Notes
    risk 0.06cvss —epss 0.38

    The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.

  • CVE-2012-0198Mar 6, 2012
    IBM
    Tivoli Provisioning Manager Express For Software Distribution
    risk 0.06cvss —epss 0.37

    Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file.

  • CVE-2012-0201Mar 2, 2012
    IBM
    Personal Communications
    risk 0.06cvss —epss 0.37

    Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.

  • CVE-2011-1213May 31, 2011
    IBM
    Lotus Notes
    risk 0.06cvss —epss 0.33

    Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W.

  • CVE-2010-3407Sep 16, 2010
    IBM
    Lotus Domino
    risk 0.06cvss —epss 0.41

    Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an…

  • CVE-2009-2754Mar 5, 2010
    IBM
    Informix Dynamic Server
    risk 0.06cvss —epss 0.40

    Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows…

  • CVE-2009-3853Nov 4, 2009
    IBM
    Tivoli Storage Manager
    risk 0.06cvss —epss 0.37

    Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to…

  • CVE-2009-0215Mar 25, 2009
    IBM
    Access Support eGatherer ActiveX control
    risk 0.06cvss —epss 0.36

    Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2009-0880Mar 12, 2009
    IBM
    Director
    risk 0.06cvss —epss 0.32

    Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. (dot dot) in a /CIMListener/ URI in an M-POST request.

  • CVE-2001-0554Aug 14, 2001
    Telnetd
    Telnetd
    risk 0.06cvss —epss 0.38

    Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

  • CVE-2013-6720Mar 6, 2014
    IBM
    Tealeaf Cx
    risk 0.05cvss —epss 0.29

    Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2 allows remote authenticated users to bypass intended access restrictions via a .. (dot dot) in the…

  • CVE-2013-6719Mar 6, 2014
    IBM
    Tealeaf Cx
    risk 0.05cvss —epss 0.27

    delivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the testconn_host parameter.

  • CVE-2012-2175Jun 20, 2012
    IBM
    Lotus Inotes
    risk 0.05cvss —epss 0.29

    Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument.

  • CVE-2012-2176May 25, 2012
    IBM
    Lotus Quickr
    risk 0.05cvss —epss 0.31

    Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method.

  • CVE-2012-0708Apr 22, 2012
    IBM
    Rational Clearquest
    risk 0.05cvss —epss 0.31

    Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a…

  • CVE-2010-3187Aug 30, 2010
    IBM
    Aix
    risk 0.05cvss —epss 0.20

    Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.

  • CVE-2010-1039May 20, 2010
    Sgi
    Irix
    risk 0.05cvss —epss 0.20

    Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code…

  • CVE-2009-2727Aug 10, 2009
    IBM
    Aix
    risk 0.05cvss —epss 0.27

    Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary…

  • CVE-2007-0977Feb 16, 2007
    IBM
    Lotus Domino
    risk 0.05cvss —epss 0.19

    IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428.

  • CVE-2003-0681Oct 6, 2003
    Sendmail, Inc.
    Sendmail
    risk 0.05cvss —epss 0.22

    A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

  • CVE-2001-0552Sep 20, 2001
    Tivoli
    Netview
    risk 0.05cvss —epss 0.26

    ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.

  • CVE-1999-0009Apr 8, 1998
    Isc
    Bind
    risk 0.05cvss —epss 0.29

    Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

  • CVE-1999-0003Apr 1, 1998
    Sgi
    Tooltalk
    risk 0.05cvss —epss 0.25

    Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

  • CVE-2015-1930Jun 30, 2015
    IBM
    Tivoli Storage Manager Fastback
    risk 0.04cvss —epss 0.10

    Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929,…

  • CVE-2014-3085Aug 17, 2014
    IBM
    Global Console Manager 16 Firmware
    risk 0.04cvss —epss 0.08

    systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the lpres parameter.

  • CVE-2013-3982May 26, 2014
    IBM
    Sametime
    risk 0.04cvss —epss 0.13

    The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to obtain unspecified installation information and technical data via a request to a public page.

  • CVE-2013-3977May 26, 2014
    IBM
    Sametime
    risk 0.04cvss —epss 0.09

    The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine which meeting rooms are owned by a user by leveraging knowledge of valid user names.

  • CVE-2013-3975May 26, 2014
    IBM
    Sametime
    risk 0.04cvss —epss 0.13

    Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names, and e-mail addresses via a search.

  • CVE-2013-3986Nov 8, 2013
    IBM
    Sametime
    risk 0.04cvss —epss 0.09

    IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service (WebPlayer Firefox extension crash) via a crafted Audio Visual (AV) session.

  • CVE-2012-0744Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.04cvss —epss 0.08

    IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information via a request to a (1) snoop, (2) hello, (3) ivt/, (4) hitcount, (5) HitCount.jsp, (6) HelloHTMLError.jsp, (7) HelloHTML.jsp, (8)…

  • CVE-2011-3575Sep 19, 2011
    IBM
    Lotus Domino
    risk 0.04cvss —epss 0.11

    Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf.

  • CVE-2011-1206Apr 21, 2011
    IBM
    Tivoli Directory Server
    risk 0.04cvss —epss 0.16

    Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka…

  • CVE-2011-1519Mar 25, 2011
    IBM
    Lotus Domino
    risk 0.04cvss —epss 0.09

    The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing…

  • CVE-2011-0920Feb 8, 2011
    IBM
    Lotus Domino
    risk 0.04cvss —epss 0.10

    The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors, aka SPR PRAD89WGRS.

  • CVE-2011-0917Feb 8, 2011
    IBM
    Lotus Domino
    risk 0.04cvss —epss 0.14

    Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operation, aka SPR KLYH87LMVX.

  • CVE-2010-3894Nov 12, 2010
    IBM
    Omnifind
    risk 0.04cvss —epss 0.12

    Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Enterprise Edition before 8.5 FP6 allows remote attackers to execute arbitrary code…

Page 123 of 177