cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2015-1975,https://securityvulnerability.io/vulnerability/CVE-2015-1975,,"The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument injection. IBM X-Force ID: 103694.",IBM,Tivoli Directory Server,7.8,HIGH,0.0004199999966658652,false,,false,false,false,,,false,false,,2018-04-03T22:00:00.000Z,0
CVE-2015-1977,https://securityvulnerability.io/vulnerability/CVE-2015-1977,,"Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x before 6.4.0.9-ISS-ISDS-IF0009 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.",IBM,Tivoli Directory Server,7.5,HIGH,0.0027699999045580626,false,,false,false,false,,,false,false,,2016-07-15T18:00:00.000Z,0
CVE-2015-2019,https://securityvulnerability.io/vulnerability/CVE-2015-2019,,"IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent caching of documents retrieved in SSL sessions, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation.",IBM,Tivoli Directory Server,,,0.0004900000058114529,false,,false,false,false,,,false,false,,2015-06-28T15:00:00.000Z,0
CVE-2015-1972,https://securityvulnerability.io/vulnerability/CVE-2015-1972,,"IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to obtain sensitive error-log information via a crafted POST request.",IBM,Tivoli Directory Server,,,0.0014900000533089042,false,,false,false,false,,,false,false,,2015-06-28T15:00:00.000Z,0
CVE-2015-1974,https://securityvulnerability.io/vulnerability/CVE-2015-1974,,"The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote authenticated users to bypass intended command restrictions via unspecified vectors.",IBM,Tivoli Directory Server,,,0.001449999981559813,false,,false,false,false,,,false,false,,2015-06-28T15:00:00.000Z,0
CVE-2015-1959,https://securityvulnerability.io/vulnerability/CVE-2015-1959,,"IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not properly restrict encrypted files, which allows local users to obtain sensitive information or possibly have unspecified other impact via a (1) download or (2) upload action.",IBM,Tivoli Directory Server,,,0.0004199999966658652,false,,false,false,false,,,false,false,,2015-06-28T15:00:00.000Z,0
CVE-2015-1978,https://securityvulnerability.io/vulnerability/CVE-2015-1978,,"Cross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",IBM,Tivoli Directory Server,,,0.0009599999757483602,false,,false,false,false,,,false,false,,2015-06-28T15:00:00.000Z,0
CVE-2015-0138,https://securityvulnerability.io/vulnerability/CVE-2015-0138,,"GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server (ISDS) 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the ""FREAK"" issue, a different vulnerability than CVE-2015-0204.",IBM,Tivoli Directory Server,,,0.004980000201612711,false,,false,false,false,,,false,false,,2015-03-25T01:00:00.000Z,0
CVE-2014-6100,https://securityvulnerability.io/vulnerability/CVE-2014-6100,,"Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.",IBM,"Security Directory Server,Tivoli Directory Server",,,0.000859999970998615,false,,false,false,false,,,false,false,,2014-10-19T01:00:00.000Z,0
CVE-2012-2203,https://securityvulnerability.io/vulnerability/CVE-2012-2203,,"IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving insertion of an arbitrary root Certification Authority (CA) certificate.",IBM,"Rational Directory Server,Tivoli Directory Server,Global Security Kit",,,0.009770000353455544,false,,false,false,false,,,false,false,,2012-08-08T10:00:00.000Z,0
CVE-2012-2191,https://securityvulnerability.io/vulnerability/CVE-2012-2191,,"IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.",IBM,"Rational Directory Server,Tivoli Directory Server,Global Security Kit",,,0.09786000102758408,false,,false,false,false,,,false,false,,2012-08-08T10:00:00.000Z,0
CVE-2012-0726,https://securityvulnerability.io/vulnerability/CVE-2012-0726,,"The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.",IBM,Tivoli Directory Server,,,0.003599999938160181,false,,false,false,false,,,false,false,,2012-04-22T18:00:00.000Z,0
CVE-2012-0740,https://securityvulnerability.io/vulnerability/CVE-2012-0740,,Cross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.,IBM,Tivoli Directory Server,,,0.002460000105202198,false,,false,false,false,,,false,false,,2012-04-22T18:00:00.000Z,0
CVE-2012-0743,https://securityvulnerability.io/vulnerability/CVE-2012-0743,,IBM Tivoli Directory Server (TDS) 6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via a malformed LDAP paged search request.,IBM,Tivoli Directory Server,,,0.021330000832676888,false,,false,false,false,,,false,false,,2012-04-22T18:00:00.000Z,0
CVE-2011-2758,https://securityvulnerability.io/vulnerability/CVE-2011-2758,,"IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL.",IBM,Tivoli Directory Server,,,0.003659999929368496,false,,false,false,false,,,false,false,,2011-07-17T20:55:00.000Z,0
CVE-2011-2759,https://securityvulnerability.io/vulnerability/CVE-2011-2759,,"The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.",IBM,Tivoli Directory Server,,,0.003269999986514449,false,,false,false,false,,,false,false,,2011-07-17T20:00:00.000Z,0
CVE-2008-7287,https://securityvulnerability.io/vulnerability/CVE-2008-7287,,Multiple memory leaks in the (1) ldap_init and (2) ldap_url_search_direct API functions in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote authenticated users to cause a denial of service (memory consumption) by making many function calls.,IBM,Tivoli Directory Server,,,0.0017399999778717756,false,,false,false,false,,,false,false,,2011-04-21T10:55:00.000Z,0
CVE-2007-6742,https://securityvulnerability.io/vulnerability/CVE-2007-6742,,"The get_filter_list function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service (infinite loop) via a malformed search filter.",IBM,Tivoli Directory Server,,,0.0017399999778717756,false,,false,false,false,,,false,false,,2011-04-21T10:55:00.000Z,0
CVE-2009-5073,https://securityvulnerability.io/vulnerability/CVE-2009-5073,,IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry.,IBM,Tivoli Directory Server,,,0.0017399999778717756,false,,false,false,false,,,false,false,,2011-04-21T10:55:00.000Z,0
CVE-2011-1822,https://securityvulnerability.io/vulnerability/CVE-2011-1822,,"The LDAP_ADD implementation in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users to obtain sensitive information by reading this log.",IBM,Tivoli Directory Server,,,0.0004199999966658652,false,,false,false,false,,,false,false,,2011-04-21T10:55:00.000Z,0
CVE-2008-7288,https://securityvulnerability.io/vulnerability/CVE-2008-7288,,IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service (server destabilization) via an anonymous DIGEST-MD5 LDAP Bind operation.,IBM,Tivoli Directory Server,,,0.0031300000846385956,false,,false,false,false,,,false,false,,2011-04-21T10:55:00.000Z,0
CVE-2008-7289,https://securityvulnerability.io/vulnerability/CVE-2008-7289,,"IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote authenticated users to cause a denial of service (DB2 daemon deadlock) by making password changes that trigger updates to a DB2 password-history table.",IBM,Tivoli Directory Server,,,0.0022700000554323196,false,,false,false,false,,,false,false,,2011-04-21T10:55:00.000Z,0
CVE-2008-7290,https://securityvulnerability.io/vulnerability/CVE-2008-7290,,Memory leak in the ldap_explode_rdn API function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allows remote authenticated users to cause a denial of service (memory consumption) by making many function calls.,IBM,Tivoli Directory Server,,,0.0017399999778717756,false,,false,false,false,,,false,false,,2011-04-21T10:55:00.000Z,0
CVE-2009-5072,https://securityvulnerability.io/vulnerability/CVE-2009-5072,,Memory leak in the ldap_explode_dn function in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003) allows remote authenticated users to cause a denial of service (memory consumption) via an empty string argument.,IBM,Tivoli Directory Server,,,0.0017399999778717756,false,,false,false,false,,,false,false,,2011-04-21T10:55:00.000Z,0
CVE-2010-4785,https://securityvulnerability.io/vulnerability/CVE-2010-4785,,"The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended operation that triggers certain comparisons involving the NULL operation OID.",IBM,Tivoli Directory Server,,,0.0017399999778717756,false,,false,false,false,,,false,false,,2011-04-21T10:55:00.000Z,0