cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2019-4246,https://securityvulnerability.io/vulnerability/CVE-2019-4246,,IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM X-Force ID: 159521.,IBM,Daeja Viewone Virtual,3.7,LOW,0.0006399999838322401,false,,false,false,false,,,false,false,,2019-10-01T15:15:00.000Z,0 CVE-2019-4456,https://securityvulnerability.io/vulnerability/CVE-2019-4456,,"IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 163620.",IBM,Daeja Viewone,7.1,HIGH,0.0011599999852478504,false,,false,false,false,,,false,false,,2019-07-30T14:15:00.000Z,0 CVE-2019-4260,https://securityvulnerability.io/vulnerability/CVE-2019-4260,,"IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012.",IBM,Daeja Viewone,5.3,MEDIUM,0.0006500000017695129,false,,false,false,false,,,false,false,,2019-07-02T15:15:00.000Z,0 CVE-2018-1835,https://securityvulnerability.io/vulnerability/CVE-2018-1835,,"IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150514.",IBM,Daeja Viewone,7.1,HIGH,0.0009699999936856329,false,,false,false,false,,,false,false,,2018-11-02T15:29:00.000Z,0 CVE-2018-1399,https://securityvulnerability.io/vulnerability/CVE-2018-1399,,"IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138435.",IBM,Daeja Viewone,5.4,MEDIUM,0.0006099999882280827,false,,false,false,false,,,false,false,,2018-02-27T17:29:00.000Z,0 CVE-2017-1212,https://securityvulnerability.io/vulnerability/CVE-2017-1212,,"IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to a denial of service when viewing or opening a large file. IBM X-Force ID: 123852.",IBM,Daeja Viewone,6.5,MEDIUM,0.0010000000474974513,false,,false,false,false,,,false,false,,2017-10-24T21:29:00.000Z,0 CVE-2017-1209,https://securityvulnerability.io/vulnerability/CVE-2017-1209,,"IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123849.",IBM,Daeja Viewone,5.4,MEDIUM,0.0004900000058114529,false,,false,false,false,,,false,false,,2017-10-24T21:29:00.000Z,0 CVE-2017-1210,https://securityvulnerability.io/vulnerability/CVE-2017-1210,,"IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look legitimate. IBM X-Force ID: 123850.",IBM,Daeja Viewone,7.5,HIGH,0.0014900000533089042,false,,false,false,false,,,false,false,,2017-10-24T21:29:00.000Z,0 CVE-2017-1211,https://securityvulnerability.io/vulnerability/CVE-2017-1211,,"IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled. IBM X-Force ID: 123851.",IBM,Daeja Viewone,2.5,LOW,0.0004199999966658652,false,,false,false,false,,,false,false,,2017-10-24T21:00:00.000Z,0 CVE-2017-1308,https://securityvulnerability.io/vulnerability/CVE-2017-1308,,"IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462.",IBM,Daeja Viewone,6.5,MEDIUM,0.0007600000244565308,false,,false,false,false,,,false,false,,2017-07-13T15:29:00.000Z,0