Show filters
29 Total Results
Displaying 21-29 of 29
Sort by:
Attacker Value
Unknown

CVE-2020-4199

Disclosure Date: March 16, 2020 (last updated February 21, 2025)
IBM Tivoli Netcool/OMNIbus 8.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 174910.
Attacker Value
Unknown

CVE-2020-4196

Disclosure Date: March 02, 2020 (last updated February 21, 2025)
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174907.
Attacker Value
Unknown

CVE-2020-4197

Disclosure Date: March 02, 2020 (last updated February 21, 2025)
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174908.
Attacker Value
Unknown

CVE-2020-4198

Disclosure Date: March 02, 2020 (last updated February 21, 2025)
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174909.
Attacker Value
Unknown

CVE-2019-15741

Disclosure Date: September 16, 2019 (last updated November 27, 2024)
An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalation
Attacker Value
Unknown

CVE-2014-3032

Disclosure Date: January 17, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus 7.3.0 before 7.3.0.6, 7.3.1 before 7.3.1.7, and 7.4.0 before 7.4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
0
Attacker Value
Unknown

CVE-2014-0942

Disclosure Date: May 01, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941.
0
Attacker Value
Unknown

CVE-2014-0941

Disclosure Date: May 01, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0942.
0
Attacker Value
Unknown

CVE-2011-1343

Disclosure Date: March 09, 2011 (last updated October 04, 2023)
SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters."
0