Search Results (17430 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-40231 3 Ibm, Linux, Microsoft 4 Aix, Sterling B2b Integrator, Linux Kernel and 1 more 2025-03-12 4.3 Medium
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 235533.
CVE-2023-24960 3 Ibm, Linux, Microsoft 4 Aix, Infosphere Information Server, Linux Kernel and 1 more 2025-03-12 7.5 High
IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 246333
CVE-2021-29827 3 Ibm, Linux, Microsoft 4 Aix, Infosphere Information Server, Linux Kernel and 1 more 2025-03-12 5.2 Medium
IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
CVE-2023-25928 3 Ibm, Linux, Microsoft 4 Aix, Infosphere Information Server, Linux Kernel and 1 more 2025-03-12 4.6 Medium
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 247646.
CVE-2024-37527 3 Ibm, Linux, Microsoft 3 Openpages With Watson, Linux Kernel, Windows 2025-03-11 5.4 Medium
IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2023-50945 3 Ibm, Linux, Microsoft 4 Aix, Common Licensing, Linux Kernel and 1 more 2025-03-11 6.2 Medium
IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.
CVE-2023-50946 3 Ibm, Linux, Microsoft 4 Aix, Common Licensing, Linux Kernel and 1 more 2025-03-11 6.5 Medium
IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism.
CVE-2024-40706 3 Ibm, Linux, Microsoft 4 Aix, Infosphere Information Server, Linux Kernel and 1 more 2025-03-11 5.3 Medium
IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks against the system.
CVE-2024-52363 3 Ibm, Linux, Microsoft 4 Aix, Infosphere Information Server, Linux Kernel and 1 more 2025-03-11 6.5 Medium
IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
CVE-2023-23472 3 Ibm, Linux, Microsoft 4 Aix, Infosphere Information Server, Linux Kernel and 1 more 2025-03-11 3.1 Low
IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid in further attacks against the system.
CVE-2022-30170 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-03-11 7.3 High
Windows Credential Roaming Service Elevation of Privilege Vulnerability
CVE-2022-37958 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 8.1 High
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
CVE-2022-38011 1 Microsoft 3 Raw Image Extension, Windows 10, Windows 11 2025-03-11 7.3 High
Raw Image Extension Remote Code Execution Vulnerability
CVE-2022-37959 1 Microsoft 4 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 1 more 2025-03-11 6.5 Medium
Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability
CVE-2022-38006 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 6.5 Medium
Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-38005 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-37957 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-03-11 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-38004 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 7.8 High
Windows Fax Service Remote Code Execution Vulnerability
CVE-2022-37956 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-37955 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 7.8 High
Windows Group Policy Elevation of Privilege Vulnerability