|
218971
|
7.5 |
HIGH
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by improper handling of request headers. A remote attacker could exploit this vulnerability to cau…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2019-4046
|
2024-11-21 13:43 |
2019-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218972
|
7.5 |
HIGH
Network
|
ibm
|
api_connect
|
IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users. IBM X-Force ID: 156544.
|
NVD-CWE-noinfo
|
CVE-2019-4052
|
2024-11-21 13:43 |
2019-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218973
|
5.4 |
MEDIUM
Network
|
ibm
|
content_navigator
|
IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If attackers make a fake IBM Content Navigator site, they can send a link to ICN users to send request to …
|
CWE-601
Open Redirect
|
CVE-2019-4035
|
2024-11-21 13:43 |
2019-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218974
|
7.8 |
HIGH
Local
|
ibm
|
db2
|
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to …
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2019-4094
|
2024-11-21 13:43 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218975
|
8.8 |
HIGH
Network
|
ibm
|
content_navigator
|
IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation. When editing an executable file in ICN with Edit service, it will be executed on the user's w…
|
NVD-CWE-noinfo
|
CVE-2019-4034
|
2024-11-21 13:43 |
2019-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218976
|
7.8 |
HIGH
Local
|
ibm
|
db2
|
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary …
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-4016
|
2024-11-21 13:43 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218977
|
7.8 |
HIGH
Local
|
ibm
|
db2
|
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary …
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-4015
|
2024-11-21 13:43 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218978
|
5.4 |
MEDIUM
Network
|
ibm
|
websphere_virtual_enterprise websphere_application_server
|
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functio…
|
CWE-79
Cross-site Scripting
|
CVE-2019-4030
|
2024-11-21 13:43 |
2019-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218979
|
5.9 |
MEDIUM
Network
|
ibm
|
sterling_b2b_integrator
|
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in t…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2019-4063
|
2024-11-21 13:43 |
2019-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218980
|
9.8 |
CRITICAL
Network
|
ibm
|
financial_transaction_manager
|
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the at…
|
CWE-89
SQL Injection
|
CVE-2019-4032
|
2024-11-21 13:43 |
2019-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|