28 results (0.022 seconds)

CVSS: 8.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2016-3039

https://notcve.org/view.php?id=CVE-2016-3039

IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. IBM Traveler 8.x y 9.x en versiones anteriores a 9.0.1.12 permite a usuarios remotos autenticados leer archivos arbitrarios o provocar una denegación de servicio (consumo de memoria) a través de datos XML contenedores de una declaración de entidad externa en conjunción con una referencia a entidad, relacionada con un caso XML External Entity (XXE). • http://www-01.ibm.com/support/docview.wss?uid=swg1LO89357 http://www-01.ibm.com/support/docview.wss?uid=swg21985858 http://www.securityfocus.com/bid/91796 •

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2014-8921

https://notcve.org/view.php?id=CVE-2014-8921

The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict the number of executions of the automatic configuration option, which makes it easier for remote attackers to capture credentials by conducting a phishing attack involving an encrypted e-mail message. La aplicación IBM Notes Traveler Companion 1.0 y 1.1 anterior a 201411010515 para Window Phone, distribuido en IBM Notes Traveler 9.0.1, no restringe correctamente el número de ejecuciones de la opción de la configuración automática, lo que facilita a atacantes remotos capturar credenciales mediante la realización de un ataque de phishing involucrando un mensaje de email cifrado. • http://www-01.ibm.com/support/docview.wss?uid=swg21690582 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2014-6130

https://notcve.org/view.php?id=CVE-2014-6130

The IBM Notes Traveler application before 9.0.1.3 for Android lacks a warning message during selection of an HTTP session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which the user had intended to use HTTPS. La aplicación IBM Notes Traveler anterior a 9.0.1.3 para Android le falta un mensaje de aviso durante la selección de una sesión HTTP, lo que facilita a atacantes remotos obtener información sensible mediante la captura de trafico de la red durante una sesión en la cual el usuario tuviera intención de utilizar HTTPS. • http://www-01.ibm.com/support/docview.wss?uid=swg21688840 http://www.kb.cert.org/vuls/id/432608 http://www.securityfocus.com/bid/70871 https://exchange.xforce.ibmcloud.com/vulnerabilities/96810 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.2EPSS: 0%CPEs: 8EXPL: 0

CVE-2013-0536

https://notcve.org/view.php?id=CVE-2013-0536

ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that arrange for code to be executed during the next login session of a different user, aka SPR PJOK959J24. ntmulti.exe en el servicio Multi User Profile Cleanup en IBM Notes v8.0, v8.0.1, v8.0.2, v8.5, v8.5.1, v8.5.2, v8.5.3 anterior a FP5, y v9.0 anterior a IF2 permite a usuarios locales ganar privilegios mediante vectores que comprenden la ejecución de código durante la siguiente sesión de un usuario diferente. También conocido como SPR PJOK959J24. • http://www-01.ibm.com/support/docview.wss?uid=swg21633827 https://exchange.xforce.ibmcloud.com/vulnerabilities/82658 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 9.3EPSS: 12%CPEs: 128EXPL: 0

CVE-2012-4821 – JDK: getDeclaredMethods() and setAccessible() code execution

https://notcve.org/view.php?id=CVE-2012-4821

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods. Múltiples vulnerabilidades no especificadas en el componente JRE en IBM Java 7 SR2 y anteriores, Java v6.0.1 SR3 y anteriores, Java 6 SR11 y anteriores, Java 5 SR14 y anteriores, y Java 142 SR13 FP13 y anteriores; como las usadas en IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control v5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, y Service Deliver Manager; y otros productos de otros vendedores como Red Hat, permite a atacantes remotos a ejecutar código través de vectores relacionados con "uso inseguro" de métodos (1) java.lang.Class getDeclaredMethods o (2) java.lang.reflect.AccessibleObject setAccessible(). • http://rhn.redhat.com/errata/RHSA-2012-1467.html http://seclists.org/bugtraq/2012/Sep/38 http://secunia.com/advisories/51326 http://secunia.com/advisories/51634 http://www-01.ibm.com/support/docview.wss?uid=swg1IV29659 http://www-01.ibm.com/support/docview.wss?uid=swg21615705 http://www-01.ibm.com/support/docview.wss?uid=swg21615800 http://www-01.ibm.com/support/docview.wss?uid=swg21616490 http://www-01.ibm.com/support/docview.wss? •