Vulnerabilities > IBM > AIX > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-02-10 | CVE-2009-0435 | Multiple vulnerability in IBM WebSphere Application Server Unspecified vulnerability in the IBM Asynchronous I/O (aka AIO or libibmaio) library in the Java Message Service (JMS) component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.17 on AIX 5.3 allows attackers to cause a denial of service (daemon crash) via vectors related to the aio_getioev2 and getEvent methods. | 5.0 |
| 2008-12-09 | CVE-2008-5387 | Buffer Errors vulnerability in IBM AIX 6.1/6.1.1/6.1.2 Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors. | 6.2 |
| 2008-12-09 | CVE-2008-5386 | Buffer Errors vulnerability in IBM AIX 6.1/6.1.1/6.1.2 Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors. | 6.9 |
| 2008-12-09 | CVE-2008-5385 | Permissions, Privileges, and Access Controls vulnerability in IBM AIX 6.1/6.1.1/6.1.2 enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files via unspecified vectors. | 6.9 |
| 2008-12-09 | CVE-2008-5384 | Permissions, Privileges, and Access Controls vulnerability in IBM AIX 6.1/6.1.1/6.1.2 crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor. | 6.9 |
| 2008-08-29 | CVE-2008-3860 | Cross-Site Scripting vulnerability in IBM Lotus Quickr 8.1 Multiple cross-site scripting (XSS) vulnerabilities (1) in the WYSIWYG editors, (2) during local group creation, (3) during HTML redirects, (4) in the HTML import, (5) in the Rich text editor, and (6) in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inject arbitrary web script or HTML via unknown vectors, including (7) the Imported Page. | 4.3 |
| 2008-06-02 | CVE-2008-2514 | Buffer Errors vulnerability in IBM AIX 5.2/5.3/6.1 Buffer overflow in errpt in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown attack vectors. | 4.6 |
| 2008-05-13 | CVE-2008-2163 | Cross-Site Scripting vulnerability in IBM Lotus Quickr 8.1 Cross-site scripting (XSS) vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors." | 4.3 |
| 2008-03-31 | CVE-2008-1598 | Information Exposure vulnerability in IBM AIX 6.1 The kernel in IBM AIX 6.1 allows local users with ProbeVue privileges to read arbitrary kernel memory and obtain sensitive information via unspecified vectors. | 4.7 |
| 2008-03-31 | CVE-2008-1597 | Denial-Of-Service vulnerability in IBM AIX 6.1 The WPAR system call implementation in the kernel in IBM AIX 6.1 allows local users to cause a denial of service via unknown calls that trigger "undefined behavior." | 4.9 |