Unspecified vulnerability in ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote attackers to obtain sensitive information, including passwords, via unspecified vectors.
Max CVSS
5.0
EPSS Score
0.95%
Published
2006-12-31
Updated
2011-03-08
Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and attack vectors, related to ASN.1 parsing.
Max CVSS
10.0
EPSS Score
0.16%
Published
2006-12-31
Updated
2008-09-05
IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257.
Max CVSS
5.0
EPSS Score
0.27%
Published
2006-12-19
Updated
2008-09-05
The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests."
Max CVSS
5.0
EPSS Score
0.93%
Published
2006-12-19
Updated
2011-06-14
Unspecified vulnerability in the Utility Classes for IBM WebSphere Application Server (WAS) before 5.1.1.13 and 6.x before 6.0.2.17 has unknown impact and attack vectors.
Max CVSS
10.0
EPSS Score
2.03%
Published
2006-12-19
Updated
2017-07-29
IBM WebSphere Host On-Demand 6.0, 7.0, 8.0, 9.0, and possibly 10, allows remote attackers to bypass authentication via a modified pnl parameter, related to hod/HODAdmin.html and hod/frameset.html.
Max CVSS
7.5
EPSS Score
1.92%
Published
2006-12-14
Updated
2018-10-17
Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of service (crash) via a large index value in unspecified messages, a different issue than CVE-2006-5855.
Max CVSS
7.5
EPSS Score
5.25%
Published
2006-12-06
Updated
2018-10-17
IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) does not perform EAL4 authentication checks at the proper time during "registering of response operation," which has unknown impact and attack vectors.
Max CVSS
10.0
EPSS Score
0.39%
Published
2006-11-28
Updated
2011-03-08
Multiple unspecified vulnerabilities in IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) have unknown impact and attack vectors, related to (1) a "Potential security vulnerability" (PK29725) and (2) "Potential security exposure" (PK30831).
Max CVSS
10.0
EPSS Score
0.49%
Published
2006-11-28
Updated
2011-03-08
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.
Max CVSS
10.0
EPSS Score
96.37%
Published
2006-12-06
Updated
2018-10-17
The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file.
Max CVSS
5.0
EPSS Score
0.65%
Published
2006-11-10
Updated
2017-07-20
Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users to gain privileges and execute arbitrary code via unspecified vectors.
Max CVSS
7.2
EPSS Score
0.04%
Published
2006-11-08
Updated
2017-07-20
The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374.
Max CVSS
7.5
EPSS Score
0.60%
Published
2006-10-17
Updated
2011-03-08
Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a "possible security exposure," aka PK29360.
Max CVSS
10.0
EPSS Score
0.54%
Published
2006-10-17
Updated
2011-03-08
IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page.
Max CVSS
6.4
EPSS Score
0.55%
Published
2006-10-05
Updated
2018-10-17
Untrusted search path vulnerability in snappd in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via a Trojan horse program, involving the "system subroutine".
Max CVSS
7.2
EPSS Score
0.04%
Published
2006-09-27
Updated
2017-07-20
Untrusted search path vulnerability in acctctl in IBM AIX 5.3.0 allows local users to execute arbitrary commands by modifying the path to point to a malicious mkdir program.
Max CVSS
7.2
EPSS Score
0.04%
Published
2006-09-27
Updated
2017-07-20
Unspecified vulnerability in xlock in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands and overwrite arbitrary files via unspecified vectors, possibly involving a buffer overflow.
Max CVSS
7.2
EPSS Score
0.04%
Published
2006-09-27
Updated
2017-07-20
Unspecified vulnerability in utape in IBM AIX 5.2.0 and 5.3.0 allows attackers to execute arbitrary commands and overwrite arbitrary files via unspecified vectors.
Max CVSS
10.0
EPSS Score
1.27%
Published
2006-09-27
Updated
2017-07-20
Buffer overflow in cfgmgr in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long directory path argument.
Max CVSS
7.2
EPSS Score
0.04%
Published
2006-09-27
Updated
2017-07-20
Unspecified vulnerability in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors involving /etc/slip.login.
Max CVSS
7.2
EPSS Score
0.04%
Published
2006-09-27
Updated
2017-07-20
Unspecified vulnerability in the named8 command in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors.
Max CVSS
7.2
EPSS Score
0.04%
Published
2006-09-27
Updated
2017-07-20
Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 (invscoutClient_VPD_Survey) allows attackers to overwrite arbitrary files via unspecified vectors.
Max CVSS
5.0
EPSS Score
0.63%
Published
2006-09-27
Updated
2017-07-20
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
Max CVSS
7.5
EPSS Score
2.09%
Published
2006-09-13
Updated
2018-10-17
IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.
Max CVSS
5.0
EPSS Score
0.92%
Published
2006-09-11
Updated
2011-03-08
66 vulnerabilities found
1 2 3
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!