|
267051
|
7.5 |
HIGH
Network
|
ibm
|
jazz_reporting_service
|
The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote authenticated administrators to read arbitrary files or cause a denial of…
|
CWE-284
Improper Access Control
|
CVE-2016-0319
|
2024-11-21 11:41 |
2016-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267052
|
5.0 |
MEDIUM
Network
|
ibm
|
jazz_reporting_service
|
Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Session ID upon a logout action, which allows remote attackers to obtain access by lev…
|
CWE-284
Improper Access Control
|
CVE-2016-0318
|
2024-11-21 11:41 |
2016-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267053
|
6.5 |
MEDIUM
Network
|
ibm
|
jazz_reporting_service
|
Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
|
CWE-284
Improper Access Control
|
CVE-2016-0317
|
2024-11-21 11:41 |
2016-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267054
|
5.4 |
MEDIUM
Network
|
ibm
|
jazz_reporting_service
|
Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to…
|
CWE-79
Cross-site Scripting
|
CVE-2016-0316
|
2024-11-21 11:41 |
2016-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267055
|
3.7 |
LOW
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the installation lacks a default error page, allows remote attackers to obtain sensitive information by triggering an exception.
|
CWE-200
Information Exposure
|
CVE-2016-0378
|
2024-11-21 11:41 |
2016-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267056
|
3.7 |
LOW
Network
|
ibm
|
security_privileged_identity_manager
|
IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes it easier for remot…
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0353
|
2024-11-21 11:41 |
2016-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267057
|
5.4 |
MEDIUM
Network
|
ibm
|
lotus_inotes
|
Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS.
|
CWE-79
Cross-site Scripting
|
CVE-2016-0282
|
2024-11-21 11:41 |
2016-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267058
|
3.7 |
LOW
Network
|
ibm
|
rational_team_concert rational_quality_manager rational_software_architect_design_manager rational_collaborative_lifecycle_management rational_engineering_lifecycle_manager rational_rh…
|
IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 …
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0372
|
2024-11-21 11:41 |
2016-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267059
|
6.3 |
MEDIUM
Network
|
ibm
|
rational_team_concert
|
IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 …
|
CWE-78
OS Command
|
CVE-2016-0325
|
2024-11-21 11:41 |
2016-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267060
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_team_concert
|
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rationa…
|
CWE-79
Cross-site Scripting
|
CVE-2016-0285
|
2024-11-21 11:41 |
2016-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|