|
266771
|
6.1 |
MEDIUM
Network
|
ibm
|
bigfix_platform
|
Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HT…
|
CWE-79
Cross-site Scripting
|
CVE-2016-0293
|
2024-11-21 11:41 |
2016-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266772
|
5.9 |
MEDIUM
Network
|
ibm
|
bigfix_webreports
|
WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic.
|
CWE-200
Information Exposure
|
CVE-2016-0397
|
2024-11-21 11:41 |
2016-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266773
|
5.5 |
MEDIUM
Local
|
ibm
|
bigfix
|
WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report.
|
CWE-200
Information Exposure
|
CVE-2016-0292
|
2024-11-21 11:41 |
2016-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266774
|
3.3 |
LOW
Local
|
ibm
|
sterling_connect\
|
IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0380
|
2024-11-21 11:41 |
2016-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266775
|
6.5 |
MEDIUM
Network
|
ibm
|
general_parallel_file_system
|
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticate…
|
NVD-CWE-noinfo
|
CVE-2016-0361
|
2024-11-21 11:41 |
2016-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266776
|
3.7 |
LOW
Network
|
ibm
|
aix
vios
|
The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, allows remote attackers to cause a denial of service (FC1763 or FC5899 adapter cras…
|
CWE-20
Improper Input Validation
|
CVE-2016-0281
|
2024-11-21 11:41 |
2016-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266777
|
3.7 |
LOW
Network
|
ibm
|
vios
aix
|
IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
|
CWE-254
7PK - Security Features
|
CVE-2016-0266
|
2024-11-21 11:41 |
2016-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266778
|
5.4 |
MEDIUM
Network
|
ibm
|
information_server_framework
infosphere_information_governance_catalog
infosphere_information_server_business_glossary
|
Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server F…
|
CWE-79
Cross-site Scripting
|
CVE-2016-0280
|
2024-11-21 11:41 |
2016-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266779
|
5.3 |
MEDIUM
Network
|
ibm
|
maximo_asset_management
|
IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files.
|
CWE-200
Information Exposure
|
CVE-2016-0393
|
2024-11-21 11:41 |
2016-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266780
|
6.2 |
MEDIUM
Local
|
ibm
|
personal_communications
|
IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging acces…
|
CWE-200
Information Exposure
|
CVE-2016-0321
|
2024-11-21 11:41 |
2016-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
