VYPR
← IBM

Vendor CVEs

IBM

All CVEs

9,137 total · sorted by risk
  • CVE-2015-4933Aug 3, 2015
    IBM
    Tivoli Storage Manager Fastback
    risk 0.01cvss —epss 0.09

    Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability than CVE-2015-4931, CVE-2015-4932, CVE-2015-4934, and CVE-2015-4935.

  • CVE-2015-4932Aug 3, 2015
    IBM
    Tivoli Storage Manager Fastback
    risk 0.01cvss —epss 0.09

    Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability than CVE-2015-4931, CVE-2015-4933, CVE-2015-4934, and CVE-2015-4935.

  • CVE-2015-4931Aug 3, 2015
    IBM
    Tivoli Storage Manager Fastback
    risk 0.01cvss —epss 0.09

    Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability than CVE-2015-4932, CVE-2015-4933, CVE-2015-4934, and CVE-2015-4935.

  • CVE-2015-1986Jun 30, 2015
    IBM
    Tivoli Storage Manager Fastback
    risk 0.01cvss —epss 0.08

    The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2015-1938.

  • CVE-2015-1942Jun 30, 2015
    IBM
    Tivoli Storage Manager Fastback
    risk 0.01cvss —epss 0.07

    The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to write to arbitrary files, and subsequently execute these files, via a crafted TCP packet to an unspecified port.

  • CVE-2015-1903May 20, 2015
    IBM
    Lotus Domino
    risk 0.01cvss —epss 0.08

    Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSN3Y.

  • CVE-2015-1902May 20, 2015
    IBM
    Lotus Domino
    risk 0.01cvss —epss 0.08

    Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSMLA.

  • CVE-2015-1920May 20, 2015
    IBM
    Websphere Application Server
    risk 0.01cvss —epss 0.07

    IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session.

  • CVE-2014-8891Mar 6, 2015
    IBM
    Java
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code…

  • CVE-2014-6140Dec 6, 2014
    IBM
    Tivoli Endpoint Manager Mobile Device Management
    risk 0.01cvss —epss 0.06

    IBM Tivoli Endpoint Manager Mobile Device Management (MDM) before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to (1) Enrollment and…

  • CVE-2014-2421Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

  • CVE-2014-0457Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2014-0456Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

  • CVE-2014-0429Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

  • CVE-2013-0509Jun 5, 2013
    IBM
    Tivoli Netcool System Service Monitors
    risk 0.01cvss —epss 0.07

    Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 allows remote attackers to execute arbitrary code via a SQL transaction with a long table name that is not properly handled…

  • CVE-2012-4823Jan 11, 2013
    IBM
    Lotus Notes
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart…

  • CVE-2012-4822Jan 11, 2013
    IBM
    Lotus Notes
    risk 0.01cvss —epss 0.07

    Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring,…

  • CVE-2012-4821Jan 11, 2013
    IBM
    Lotus Notes
    risk 0.01cvss —epss 0.07

    Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring,…

  • CVE-2012-4817Sep 14, 2012
    IBM
    Aix
    risk 0.01cvss —epss 0.08

    The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors.

  • CVE-2011-1389Jan 19, 2012
    IBM
    Rational License Key Server
    risk 0.01cvss —epss 0.07

    Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code…

  • CVE-2011-1512May 31, 2011
    IBM
    Lotus Notes
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR.

  • CVE-2011-0915Feb 8, 2011
    IBM
    Lotus Domino
    risk 0.01cvss —epss 0.12

    Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.

  • CVE-2010-3758Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.01cvss —epss 0.07

    Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka…

  • CVE-2010-3731Oct 5, 2010
    IBM
    Db2
    risk 0.01cvss —epss 0.10

    Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote attackers to execute…

  • CVE-2009-0896Jun 3, 2009
    IBM
    Websphere Mq
    risk 0.01cvss —epss 0.07

    Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request.

  • CVE-2008-4564Mar 18, 2009
    IBM
    Lotus Notes
    risk 0.01cvss —epss 0.07

    Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute…

  • CVE-2009-0869Mar 10, 2009
    IBM
    Tivoli Storage Manager
    risk 0.01cvss —epss 0.06

    Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 on Windows allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via…

  • CVE-2008-4801Oct 31, 2008
    IBM
    Tivoli Storage Manager
    risk 0.01cvss —epss 0.11

    Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1, 5.2.0.0 through 5.2.5.2, 5.3.0.0 through 5.3.6.1, 5.4.0.0 through 5.4.2.2, and…

  • CVE-2008-0401Jan 23, 2008
    IBM
    Tivoli Provisioning Manager OS Deployment
    risk 0.01cvss —epss 0.08

    Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an HTTP request…

  • CVE-2008-0247Jan 12, 2008
    IBM
    Tivoli Storage Manager Express
    risk 0.01cvss —epss 0.08

    Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value.

  • CVE-2007-5910Nov 10, 2007
    IBM
    Lotus Notes
    risk 0.01cvss —epss 0.07

    Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute…

  • CVE-2007-0067Jun 6, 2007
    IBM
    Lotus Domino Web Server
    risk 0.01cvss —epss 0.14

    Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service (daemon crash) via requests for URLs that reference certain files.

  • CVE-2007-2137Apr 22, 2007
    IBM
    Tivoli Monitoring
    risk 0.01cvss —epss 0.08

    Heap-based buffer overflow in kde.dll in IBM Tivoli Monitoring Express 6.1.0 before Fix Pack 2, as used in Tivoli Universal Agent, Windows OS Monitoring agent, and Enterprise Portal Server, allows remote attackers to execute arbitrary code by sending a long string to a certain…

  • CVE-2006-5835Nov 10, 2006
    IBM
    Lotus Notes
    risk 0.01cvss —epss 0.13

    The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file.

  • CVE-2006-4221Aug 18, 2006
    IBM
    Egatherer
    risk 0.01cvss —epss 0.09

    Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.

  • CVE-2005-2618Dec 31, 2005
    IBM
    Lotus Notes
    risk 0.01cvss —epss 0.08

    Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a…

  • CVE-2005-4272Dec 15, 2005
    IBM
    Aix
    risk 0.01cvss —epss 0.09

    Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal.

  • CVE-2004-0480Dec 6, 2004
    IBM
    Lotus Notes
    risk 0.01cvss —epss 0.09

    Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.

  • CVE-2004-0368May 4, 2004
    Microfocus
    CDE
    risk 0.01cvss —epss 0.11

    Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.

  • CVE-2004-1082Feb 3, 2004
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.08

    mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

  • CVE-2003-1104Dec 31, 2003
    IBM
    Tivoli Firewall Toolbox
    risk 0.01cvss —epss 0.07

    Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2003-0179Apr 2, 2003
    Lotus
    Domino
    risk 0.01cvss —epss 0.08

    Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.

  • CVE-2003-0178Apr 2, 2003
    IBM
    Lotus Domino Web Server
    risk 0.01cvss —epss 0.15

    Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for…

  • CVE-2003-0028Mar 25, 2003
    dietlibc
    dietlibc
    risk 0.01cvss —epss 0.15

    Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in…

  • CVE-2003-0122Mar 18, 2003
    IBM
    Lotus Notes
    risk 0.01cvss —epss 0.10

    Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.

  • CVE-2002-0678Jul 23, 2002
    Cde
    Cde
    risk 0.01cvss —epss 0.09

    CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.

  • CVE-2002-0677Jul 23, 2002
    Tooltalk
    Tooltalk Database Server
    risk 0.01cvss —epss 0.07

    CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.

  • CVE-2002-1621Apr 22, 2002
    IBM
    Aix
    risk 0.01cvss —epss 0.07

    Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.

  • CVE-2001-1311Jul 16, 2001
    Lotus
    Domino
    risk 0.01cvss —epss 0.07

    Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

  • CVE-1999-0057Nov 16, 1998
    Eric Allman
    Vacation
    risk 0.01cvss —epss 0.08

    Vacation program allows command execution by remote users through a sendmail command.

Page 134 of 183