|
197491
|
9.8 |
CRITICAL
Network
|
ibm
|
spectrum_protect
|
IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker to execute arbitrary code on the system …
|
CWE-20 CWE-787
Improper Input Validation Out-of-bounds Write
|
CVE-2020-4415
|
2024-11-21 14:32 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197492
|
4.6 |
MEDIUM
Physics
|
ibm
|
maas360
|
IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user to access restricted applications and device settings. IBM X-Force ID: 178505.
|
NVD-CWE-noinfo
|
CVE-2020-4353
|
2024-11-21 14:32 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197493
|
7.0 |
HIGH
Local
|
ibm
|
tivoli_monitoring
|
IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL f…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-4311
|
2024-11-21 14:32 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197494
|
8.8 |
HIGH
Network
|
ibm
|
urbancode_deploy
|
IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End (DFE). IBM X-Force ID: 174955.
|
NVD-CWE-noinfo
|
CVE-2020-4202
|
2024-11-21 14:32 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197495
|
6.5 |
MEDIUM
Network
|
hcltech
|
connections
|
"HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user."
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2020-4085
|
2024-11-21 14:32 |
2020-04-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197496
|
7.5 |
HIGH
Network
|
vmware
|
installbuilder
|
InstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built with versions earlier than 19.11 are vulnerable to Billion laughs attack (denial-of-service).
|
CWE-776
XML Entity Expansion
|
CVE-2020-3946
|
2024-11-21 14:32 |
2020-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197497
|
7.5 |
HIGH
Network
|
ibm
|
tririga_application_platform
|
IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an attacker formulate future attacks. IBM X-Force ID: 175993.
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2020-4277
|
2024-11-21 14:32 |
2020-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197498
|
7.3 |
HIGH
Network
|
ibm
|
infosphere_information_server
|
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server N…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-4347
|
2024-11-21 14:32 |
2020-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197499
|
5.5 |
MEDIUM
Local
|
ibm
|
mq
|
IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. IBM X-Force ID: 177937.
|
CWE-200
Information Exposure
|
CVE-2020-4338
|
2024-11-21 14:32 |
2020-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197500
|
4.3 |
MEDIUM
Network
|
ibm
|
urbancode_deploy
|
IBM UrbanCode Deploy (UCD) 7.0.5 could allow a user with special permissions to obtain sensitive information via generic processes. IBM X-Force ID: 175639.
|
NVD-CWE-noinfo
|
CVE-2020-4260
|
2024-11-21 14:32 |
2020-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|