|
267751
|
3.7 |
LOW
Network
|
ibm
|
vios
aix
|
IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
|
CWE-254
7PK - Security Features
|
CVE-2016-0266
|
2024-11-21 11:41 |
2016-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267752
|
5.4 |
MEDIUM
Network
|
ibm
|
information_server_framework
infosphere_information_governance_catalog
infosphere_information_server_business_glossary
|
Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server F…
|
CWE-79
Cross-site Scripting
|
CVE-2016-0280
|
2024-11-21 11:41 |
2016-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267753
|
5.3 |
MEDIUM
Network
|
ibm
|
maximo_asset_management
|
IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files.
|
CWE-200
Information Exposure
|
CVE-2016-0393
|
2024-11-21 11:41 |
2016-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267754
|
6.2 |
MEDIUM
Local
|
ibm
|
personal_communications
|
IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging acces…
|
CWE-200
Information Exposure
|
CVE-2016-0321
|
2024-11-21 11:41 |
2016-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267755
|
4.3 |
MEDIUM
Network
|
ibm
|
security_identity_manager_adapter
|
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site.
|
CWE-284
Improper Access Control
|
CVE-2016-0357
|
2024-11-21 11:41 |
2016-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267756
|
7.4 |
HIGH
Local
|
ibm
|
security_identity_manager_adapter
|
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveragin…
|
CWE-284
Improper Access Control
|
CVE-2016-0340
|
2024-11-21 11:41 |
2016-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267757
|
5.6 |
MEDIUM
Network
|
ibm
|
security_identity_manager_adapter
|
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to s…
|
CWE-284
Improper Access Control
|
CVE-2016-0339
|
2024-11-21 11:41 |
2016-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267758
|
6.2 |
MEDIUM
Local
|
ibm
|
security_identity_manager_adapter
|
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by (1) reading a configuration file or (2…
|
CWE-200
Information Exposure
|
CVE-2016-0338
|
2024-11-21 11:41 |
2016-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267759
|
7.3 |
HIGH
Network
|
ibm
|
security_identity_manager_adapter
|
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access by…
|
CWE-255
Credentials Management
|
CVE-2016-0330
|
2024-11-21 11:41 |
2016-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267760
|
5.4 |
MEDIUM
Network
|
ibm
|
bigfix_platform
|
Cross-site scripting (XSS) vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.2.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
|
CWE-79
Cross-site Scripting
|
CVE-2016-0269
|
2024-11-21 11:41 |
2016-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
