|
270711
|
5.4 |
MEDIUM
Network
|
ibm
|
websphere_commerce
|
Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote authentica…
|
CWE-79
Cross-site Scripting
|
CVE-2015-5009
|
2024-11-21 11:32 |
2016-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270712
|
6.1 |
MEDIUM
Network
|
ibm
|
websphere_commerce
|
Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote attackers …
|
CWE-79
Cross-site Scripting
|
CVE-2015-5008
|
2024-11-21 11:32 |
2016-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270713
|
6.1 |
MEDIUM
Network
|
ibm
|
host_on-demand
|
Cross-site scripting (XSS) vulnerability in IBM Host On-Demand 11.0 through 11.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
|
CWE-79
Cross-site Scripting
|
CVE-2015-5002
|
2024-11-21 11:32 |
2016-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270714
|
8.6 |
HIGH
Network
|
ibm
|
tealeaf_customer_experience
|
Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9…
|
CWE-22
Path Traversal
|
CVE-2015-4988
|
2024-11-21 11:32 |
2016-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270715
|
6.1 |
MEDIUM
Network
|
ibm
|
tivoli_federated_identity_manager
|
Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP16 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
|
CWE-79
Cross-site Scripting
|
CVE-2015-4959
|
2024-11-21 11:32 |
2016-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270716
|
5.3 |
MEDIUM
Network
|
ibm
|
websphere_mq_light
|
IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconnect actions, a different vulnerability than CVE-20…
|
CWE-399
Resource Management Errors
|
CVE-2015-4942
|
2024-11-21 11:32 |
2016-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270717
|
4.1 |
MEDIUM
Network
|
ibm
|
infosphere_master_data_management
|
IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct…
|
CWE-254
7PK - Security Features
|
CVE-2015-4960
|
2024-11-21 11:32 |
2016-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270718
|
3.3 |
LOW
Local
|
ibm
|
infosphere_master_data_management
|
IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 does not properly restrict browser caching, …
|
CWE-200
Information Exposure
|
CVE-2015-4958
|
2024-11-21 11:32 |
2016-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270719
|
8.8 |
HIGH
Network
|
ibm
|
websphere_commerce
|
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 8 allows remote authenticated users to hijack the authenticat…
|
CWE-352
Origin Validation Error
|
CVE-2015-5007
|
2024-11-21 11:32 |
2016-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270720
|
8.6 |
HIGH
Network
|
apache
|
subversion
|
Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which …
|
CWE-119 CWE-189
Incorrect Access of Indexable Resource ('Range Error') Numeric Errors
|
CVE-2015-5259
|
2024-11-21 11:32 |
2016-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|