CVSS: 4.3EPSS: 0%CPEs: 9EXPL: 0CVE-2014-0911
https://notcve.org/view.php?id=CVE-2014-0911
inetd in IBM WebSphere MQ 7.1.x before 7.1.0.5 and 7.5.x before 7.5.0.4 allows remote attackers to cause a denial of service (disk or CPU consumption) via unspecified vectors. inetd en IBM WebSphere MQ 7.1.x anterior a 7.1.0.5 y 7.5.x anterior a 7.5.0.4 permite a atacantes remotos causar una denegación de servicio (consumo de disco o de CPU) a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV55886 http://www-01.ibm.com/support/docview.wss?uid=swg21670374 https://exchange.xforce.ibmcloud.com/vulnerabilities/91876 •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2013-4054
https://notcve.org/view.php?id=CVE-2013-4054
Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI. Vulnerabilidad de salto de directorio en WMQ Telemetry en IBM WebSphere MQ 7.5 anterior a 7.5.0.3 permite a atacantes remotos leer archivos arbitrarios a través de una URI manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg21664550 https://exchange.xforce.ibmcloud.com/vulnerabilities/86506 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 4.6EPSS: 0%CPEs: 19EXPL: 0CVE-2013-3028
https://notcve.org/view.php?id=CVE-2013-3028
Multiple buffer overflows in mqm programs in IBM WebSphere MQ 7.0.x before 7.0.1.11, 7.1.x before 7.1.0.3, and 7.5.x before 7.5.0.2 on non-Windows platforms allow local users to gain privileges via unspecified vectors. Múltiples desbordamientos de búfer en programas mqm en IBM WebSphere MQ v7.0.x anterior a v7.0.1.11, v7.1.x anterior a v7.1.0.3, y v7.5.x anterior a v7.5.0.2 sobre plataformas no-Windows permite a usuarios locales ganar privilegios mediante vectores desconocidos. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV43368 http://www-01.ibm.com/support/docview.wss?uid=swg21639001 https://exchange.xforce.ibmcloud.com/vulnerabilities/84564 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 0%CPEs: 12EXPL: 0CVE-2012-2199
https://notcve.org/view.php?id=CVE-2012-2199
The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service (invalid address alignment exception and daemon crash) via vectors involving a multiplexed channel. El agente del canal de mensaje de servidor en el gestor de colas del servidor IBM WebSphere MQ v7.0.1 antes de v7.0.1.9, v7.1 y v7.5 en Solaris permite a atacantes remotos provocar una denegación de servicio (excepción por alineación de dirección inválida y caída del demonio) a través de vectores relacionados con un canal multiplexado. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC82725 http://www.ibm.com/support/docview.wss?uid=swg21610285 https://exchange.xforce.ibmcloud.com/vulnerabilities/76434 • CWE-399: Resource Management Errors •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2012-3295
https://notcve.org/view.php?id=CVE-2012-3295
IBM WebSphere MQ 7.1, when an SVRCONN channel is used, allows remote attackers to bypass the security-configuration setup step and obtain queue-manager access via unspecified vectors. IBM WebSphere MQ v7.1, cuando un canal SVRCONN es usado, permite a atacantes remotos evitar los pasos de security-configuration setup y obtener acceso queue-manager vía vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1PM56593 http://www.ibm.com/support/docview.wss?uid=swg21595523 https://exchange.xforce.ibmcloud.com/vulnerabilities/77279 • CWE-264: Permissions, Privileges, and Access Controls •