|
219311
|
6.5 |
MEDIUM
Network
|
ibm
|
db2
|
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would cause the server to crash. IBM X-Force ID: 162714.
|
CWE-749
Exposed Dangerous Method or Function
|
CVE-2019-4386
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219312
|
6.7 |
MEDIUM
Local
|
ibm
|
spectrum_protect_plus
|
When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: …
|
NVD-CWE-noinfo
|
CVE-2019-4383
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219313
|
6.7 |
MEDIUM
Local
|
ibm
|
spectrum_protect_plus
|
When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary c…
|
NVD-CWE-noinfo
|
CVE-2019-4357
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219314
|
5.3 |
MEDIUM
Network
|
ibm
|
robotic_process_automation_with_automation_anywhere
|
IBM Robotic Process Automation with Automation Anywhere 11 could allow an attacker to obtain sensitive information due to missing authentication in Ignite nodes. IBM X-Force ID: 161412.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-4337
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219315
|
9.8 |
CRITICAL
Network
|
ibm
|
robotic_process_automation_with_automation_anywhere
|
IBM Robotic Process Automation with Automation Anywhere 11 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161411.
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2019-4336
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219316
|
7.8 |
HIGH
Local
|
ibm
|
db2
|
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2019-4322
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219317
|
5.5 |
MEDIUM
Local
|
ibm
|
robotic_process_automation_with_automation_anywhere
|
IBM Robotic Process Automation with Automation Anywhere 11 could allow a local user to obtain highly sensitive information from log files when debugging is enabled. IBM X-Force ID: 160765.
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2019-4299
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219318
|
7.1 |
HIGH
Local
|
ibm
|
robotic_process_automation_with_automation_anywhere
|
IBM Robotic Process Automation with Automation Anywhere 11 uses a high privileged PostgreSQL account for database access which could allow a local user to perform actions they should not have privile…
|
NVD-CWE-noinfo
|
CVE-2019-4298
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219319
|
5.4 |
MEDIUM
Network
|
ibm
|
robotic_process_automation_with_automation_anywhere
|
IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit th…
|
CWE-90
LDAP Injection
|
CVE-2019-4297
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219320
|
3.3 |
LOW
Local
|
ibm
|
robotic_process_automation_with_automation_anywhere
|
IBM Robotic Process Automation with Automation Anywhere 11 information disclosure could allow a local user to obtain e-mail contents from the client debug log file. IBM X-Force ID: 160759.
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2019-4296
|
2024-11-21 13:43 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|