Page 36 of 343 results (0.010 seconds)

CVSS: 3.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2013-4022

https://notcve.org/view.php?id=CVE-2013-4022

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors. IBM Data Studio Web Console v3.x anterior a v3.2, Optim Performance Manager v5.x anterior a v5.2, InfoSphere Optim Configuration Manager v2.x anterior a v2.2 y DB2 Recovery Expert v2.x almacenan información de autenticación de usuarios no especificada en una cookie, lo que permite a usuarios autenticados remotamente evitar las restricciones de acceso establecidas a través de vectores desconocidos. • http://www-01.ibm.com/support/docview.wss?uid=swg21650504 https://exchange.xforce.ibmcloud.com/vulnerabilities/85928 • CWE-255: Credentials Management Errors •

CVSS: 1.9EPSS: 0%CPEs: 5EXPL: 0

CVE-2013-4025

https://notcve.org/view.php?id=CVE-2013-4025

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. IBM Data Studio Web Console 3.x anterior a la versión 3.2, Optim Performance Manager 5.x anterior a la versión 5.2, InfoSphere Optim Configuration Manager 2.x anterior a la versión 2.2, y DB2 Recovery Expert 2.x no tienen un atributo para desactivar el autocompletado en el campo usuario-contraseña, lo que permite fácilmente a atacantes remotos obtener acceso mediante el aprovechamiento de una estación de trabajo sin supervisión. • http://www-01.ibm.com/support/docview.wss?uid=swg21650504 https://exchange.xforce.ibmcloud.com/vulnerabilities/85933 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 4.6EPSS: 0%CPEs: 9EXPL: 0

CVE-2013-4033

https://notcve.org/view.php?id=CVE-2013-4033

IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority. IBM DB2 y DB2 Connect v9.7 hasta FP8, v9.8 hasta FP5, v10.1 hasta FP2, y v10.5 hasta FP1 permiten a los usuarios remotos autenticados ejecutar instrucciones DML mediante el aprovechamiento de la autoridad "EXPLAIN". • http://www-01.ibm.com/support/docview.wss?uid=swg1IC94523 http://www-01.ibm.com/support/docview.wss?uid=swg1IC94756 http://www-01.ibm.com/support/docview.wss?uid=swg1IC94757 http://www-01.ibm.com/support/docview.wss?uid=swg1IC94758 http://www-01.ibm.com/support/docview.wss? • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.2EPSS: 0%CPEs: 11EXPL: 0

CVE-2013-3475

https://notcve.org/view.php?id=CVE-2013-3475

Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600 and other products, allows local users to gain privileges via unspecified vectors. Desbordamiento de búfer basado en pila en db2aud en Audit Facility de IBM DB2 y DB2 Connect v9.1, v9.5, v9.7, v9.8 y v10.1, como se utiliza en Smart System Analytics 7600 y otros productos, permite a usuarios locales conseguir privilegios a través de vectores no especificados. • http://secunia.com/advisories/52663 http://secunia.com/advisories/53704 http://www-01.ibm.com/support/docview.wss?uid=swg1IC92463 http://www-01.ibm.com/support/docview.wss?uid=swg1IC92495 http://www-01.ibm.com/support/docview.wss?uid=swg1IC92496 http://www-01.ibm.com/support/docview.wss?uid=swg1IC92498 http://www-01.ibm.com/support/docview.wss? • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.5EPSS: 13%CPEs: 11EXPL: 0

CVE-2012-4826

https://notcve.org/view.php?id=CVE-2012-4826

Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 before FP7, 9.8, and 10.1 might allow remote authenticated users to execute arbitrary code by debugging a stored procedure. Desbordamiento de búfer basado en pila en la infraestructura SQL/PSM (alias SQL Persistent Stored Module) Stored Procedure (SP) en IBM DB2 v9.1, v9.5, v9.7 antes de FP7, v9.8, y v10.1, podría permitir a usuarios remotos autenticados ejecutar código de su elección depurando un procedimiento almacenado. • http://osvdb.org/86414 http://www-01.ibm.com/support/docview.wss?uid=swg1IC86765 http://www-01.ibm.com/support/docview.wss?uid=swg1IC86781 http://www-01.ibm.com/support/docview.wss?uid=swg1IC86782 http://www-01.ibm.com/support/docview.wss?uid=swg1IC86783 http://www-01.ibm.com/support/docview.wss? • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •