CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
95736 | CVE-2016-8916 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20161025) | None (candidate not yet proposed) | View | |
95737 | CVE-2016-8917 | Candidate | IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 2000943. | Assigned (20161025) | None (candidate not yet proposed) | View | |
95738 | CVE-2016-8918 | Candidate | IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials. | Assigned (20161025) | None (candidate not yet proposed) | View | |
95739 | CVE-2016-8919 | Candidate | IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources. | Assigned (20161025) | None (candidate not yet proposed) | View | |
95740 | CVE-2016-8920 | Candidate | IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | Assigned (20161025) | None (candidate not yet proposed) | View |
Page 19148 of 20943, showing 5 records out of 104715 total, starting on record 95736, ending on 95740