|
222301
|
8.8 |
HIGH
Network
|
ibm
|
security_guardium
|
IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable web server. IBM X-Force ID: 160698.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-4292
|
2024-11-21 13:43 |
2019-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222302
|
5.3 |
MEDIUM
Network
|
ibm
|
daeja_viewone
|
IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012.
|
NVD-CWE-noinfo
|
CVE-2019-4260
|
2024-11-21 13:43 |
2019-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222303
|
7.1 |
HIGH
Local
|
ibm
|
spectrum_protect
|
IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336.
|
CWE-200
Information Exposure
|
CVE-2019-4140
|
2024-11-21 13:43 |
2019-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222304
|
6.1 |
MEDIUM
Network
|
ibm
|
planning_analytics
|
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially…
|
CWE-79
Cross-site Scripting
|
CVE-2019-4134
|
2024-11-21 13:43 |
2019-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222305
|
5.3 |
MEDIUM
Network
|
ibm
|
spectrum_protect_operations_center
|
IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error message containing a stack trace. By creating an error with a stac…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2019-4129
|
2024-11-21 13:43 |
2019-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222306
|
7.8 |
HIGH
Local
|
ibm
|
spectrum_protect_operations_center
|
IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a specially crafted library loaded by the dsmqsan…
|
NVD-CWE-noinfo
|
CVE-2019-4088
|
2024-11-21 13:43 |
2019-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222307
|
9.8 |
CRITICAL
Network
|
ibm
|
spectrum_protect_operations_center
|
IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and storage agents in response to specifical…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-4087
|
2024-11-21 13:43 |
2019-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222308
|
5.4 |
MEDIUM
Network
|
ibm
|
business_automation_workflow business_process_manager
|
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu…
|
CWE-79
Cross-site Scripting
|
CVE-2019-4410
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222309
|
6.5 |
MEDIUM
Network
|
ibm
|
db2
|
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would cause the server to crash. IBM X-Force ID: 162714.
|
CWE-749
Exposed Dangerous Method or Function
|
CVE-2019-4386
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222310
|
6.7 |
MEDIUM
Local
|
ibm
|
spectrum_protect_plus
|
When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: …
|
NVD-CWE-noinfo
|
CVE-2019-4383
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|