CVSS: 4.3EPSS: 0%CPEs: 36EXPL: 0CVE-2013-5422
https://notcve.org/view.php?id=CVE-2013-5422
The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2, when a multi-database dataset exists, allows remote attackers to read database names via unspecified vectors. El Web Client de IBM Rational ClearQuest 7.1 hasta 7.1.2.12, 8.0.0.x anteriores a 8.0.0.9, y 8.0.1.x anteriores a 8.0.1.2, cuando existe un dataset multi-database permite a atacantes remotos leer los nombres de base de datos a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1PM97698 http://www-01.ibm.com/support/docview.wss?uid=swg21660036 https://exchange.xforce.ibmcloud.com/vulnerabilities/87484 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.2EPSS: 0%CPEs: 36EXPL: 0CVE-2013-5415
https://notcve.org/view.php?id=CVE-2013-5415
Buffer overflow in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unspecified vectors. Desbordamiento de buffer en IBM Rational ClearCase hasta 7.1.2.12, 8.0.0.x anteriores a 8.0.0.9 y 8.0.1.x anteriores a 8.0.1.2 permite a usuarios locales obtener privilegios a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg21657982 https://exchange.xforce.ibmcloud.com/vulnerabilities/87477 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.2EPSS: 0%CPEs: 36EXPL: 0CVE-2013-5416
https://notcve.org/view.php?id=CVE-2013-5416
Unspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unknown vectors. Vulnerabilidad no especificada en IBM Rational ClearCase hasta 7.1.2.12, 8.0.0.x anteriores a 8.0.0.3 y 8.0.1.x anteriores a 8.0.1.2 permite a usuarios locales obtener privilegios a través de vectores desconocidos. • http://www-01.ibm.com/support/docview.wss?uid=swg21657982 https://exchange.xforce.ibmcloud.com/vulnerabilities/87478 •
CVSS: 6.9EPSS: 0%CPEs: 66EXPL: 0CVE-2011-1205
https://notcve.org/view.php?id=CVE-2011-1205
Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local users to gain privileges via a Trojan horse HTML document in the My Computer zone. Múltiples desbordamientos de búfer en objetos COM no especificados de Rational Common Licensing v7.0 hasta v7.1.1.4 en IBM Rational ClearCase v7.0.0.4 hasta v7.1.1.4, ClearQuest v7.0.0.4 hasta v7.1.1.4 y otros productos, permite a usuarios locales ganar privilegios a través de un documento HTML caballo de troya en la zona de Mi PC • http://www.ibm.com/support/docview.wss?uid=swg21470998 http://www.securitytracker.com/id?1025268 http://www.securitytracker.com/id?1025269 http://www.vupen.com/english/advisories/2011/0832 https://exchange.xforce.ibmcloud.com/vulnerabilities/66304 https://exchange.xforce.ibmcloud.com/vulnerabilities/66324 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 0%CPEs: 24EXPL: 0CVE-2009-4357
https://notcve.org/view.php?id=CVE-2009-4357
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors. La interfaz web (también conocida como CQWeb) de IBM Rational ClearQuest antes de v7.1.1 no gestiona adecuadamente el uso de URLs antiguas de conexión automática, lo que podría permitir descubrir las contraseñas de cuentas de usuario los atacantes remotos mediante vectores no especificados. • http://secunia.com/advisories/37811 http://securitytracker.com/id?1023370 http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377 http://www.securityfocus.com/bid/37385 http://www.vupen.com/english/advisories/2009/3580 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •