|
219431
|
8.8 |
HIGH
Network
|
ibm
|
content_navigator
|
IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation. When editing an executable file in ICN with Edit service, it will be executed on the user's w…
|
NVD-CWE-noinfo
|
CVE-2019-4034
|
2024-11-21 13:43 |
2019-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219432
|
7.8 |
HIGH
Local
|
ibm
|
db2
|
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary …
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-4016
|
2024-11-21 13:43 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219433
|
7.8 |
HIGH
Local
|
ibm
|
db2
|
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary …
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-4015
|
2024-11-21 13:43 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219434
|
5.4 |
MEDIUM
Network
|
ibm
|
websphere_virtual_enterprise websphere_application_server
|
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functio…
|
CWE-79
Cross-site Scripting
|
CVE-2019-4030
|
2024-11-21 13:43 |
2019-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219435
|
5.9 |
MEDIUM
Network
|
ibm
|
sterling_b2b_integrator
|
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in t…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2019-4063
|
2024-11-21 13:43 |
2019-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219436
|
9.8 |
CRITICAL
Network
|
ibm
|
financial_transaction_manager
|
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the at…
|
CWE-89
SQL Injection
|
CVE-2019-4032
|
2024-11-21 13:43 |
2019-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219437
|
5.4 |
MEDIUM
Network
|
ibm
|
sterling_b2b_integrator
|
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended …
|
CWE-79
Cross-site Scripting
|
CVE-2019-4029
|
2024-11-21 13:43 |
2019-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219438
|
5.4 |
MEDIUM
Network
|
ibm
|
sterling_b2b_integrator
|
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended …
|
CWE-79
Cross-site Scripting
|
CVE-2019-4028
|
2024-11-21 13:43 |
2019-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219439
|
5.4 |
MEDIUM
Network
|
ibm
|
sterling_b2b_integrator
|
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended …
|
CWE-79
Cross-site Scripting
|
CVE-2019-4027
|
2024-11-21 13:43 |
2019-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219440
|
5.3 |
MEDIUM
Network
|
ibm
|
bigfix_platform
|
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authentic…
|
CWE-200
Information Exposure
|
CVE-2019-4061
|
2024-11-21 13:43 |
2019-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|