Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Total 8031 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-0986 1 Ibm 1 Lotus Domino Server 2025-04-03 5.0 MEDIUM N/A
NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted. NOTE: IBM has reported that it is unable to replicate this issue.
CVE-1999-0017 9 Caldera, Freebsd, Gnu and 6 more 11 Openlinux, Freebsd, Inet and 8 more 2025-04-03 7.5 HIGH N/A
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
CVE-2005-0156 7 Ibm, Larry Wall, Redhat and 4 more 9 Aix, Perl, Enterprise Linux and 6 more 2025-04-03 2.1 LOW N/A
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.
CVE-2005-4272 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal.
CVE-2003-0122 1 Ibm 2 Lotus Domino, Lotus Notes Client 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.
CVE-2004-2270 1 Ibm 1 Parallel Environment 2025-04-03 7.2 HIGH N/A
Unknown vulnerability in IBM Parallel Environment (PE) 3.2 and 4.1 allows attackers to execute arbitrary commands as root via unknown vectors in the sample code.
CVE-2002-2025 1 Ibm 1 Lotus Domino Server 2025-04-03 5.0 MEDIUM N/A
Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for (1) an MS-DOS device name and (2) an MS-DOS device name with a large number of characters appended to the device name.
CVE-2006-0662 1 Ibm 1 Lotus Domino Inotes Client 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrary web script or HTML via email with attached html files, which are directly rendered in the browser.
CVE-2002-0743 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.
CVE-2005-0425 1 Ibm 1 Websphere Application Server 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.
CVE-1999-0101 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
CVE-2004-1330 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.
CVE-2002-0745 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Buffer overflow in uucp in AIX 4.3.3.
CVE-1999-1488 1 Ibm 1 System Data Repository 2025-04-03 5.0 MEDIUM N/A
sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
CVE-1999-1013 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.
CVE-2003-0580 1 Ibm 1 U2 Universe 2025-04-03 7.2 HIGH N/A
Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.
CVE-2001-0487 1 Ibm 1 Aix Snmp 2025-04-03 5.0 MEDIUM N/A
AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.
CVE-2024-52362 1 Ibm 2 App Connect Enterprise Certified Containers Operands, App Connect Operator 2025-04-02 N/A 4.3 MEDIUM
IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, and 12.8 could allow an authenticated user to cause a denial of service in the App Connect flow due to improper validation of server-side input.
CVE-2023-27545 1 Ibm 1 Cloud Pak For Data 2025-04-01 N/A 4.0 MEDIUM
IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947.
CVE-2024-22344 1 Ibm 1 Txseries For Multiplatform 2025-03-28 N/A 6.1 MEDIUM
IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 280191.