Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Ibm Subscribe
Filtered by product Spss Samplepower
Total 7 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-0895 1 Ibm 1 Spss Samplepower 2017-08-28 7.5 HIGH N/A
Buffer overflow in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 3.0.1-IM-S3SAMPC-WIN32-FP001-IF02 allows remote attackers to execute arbitrary code via a crafted ComboList property value.
CVE-2013-0593 1 Ibm 1 Spss Samplepower 2017-08-28 9.3 HIGH N/A
Unspecified vulnerability in the olch2x32 ActiveX control in IBM SPSS SamplePower 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2013-6724 1 Ibm 1 Spss Samplepower 2017-08-28 9.3 HIGH N/A
Unspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 IF1 allows remote attackers to execute arbitrary code via a crafted ComboList property value.
CVE-2012-5947 1 Ibm 1 Spss Samplepower 2017-08-28 9.3 HIGH N/A
Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2012-5945 1 Ibm 1 Spss Samplepower 2017-08-28 9.3 HIGH N/A
Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long (1) ComboList or (2) ColComboList property value.
CVE-2012-5946 1 Ibm 1 Spss Samplepower 2017-08-28 9.3 HIGH N/A
Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.
CVE-2012-0189 1 Ibm 1 Spss Samplepower 2017-08-28 9.3 HIGH N/A
Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePower 3.0 allow remote attackers to execute arbitrary code via a crafted HTML document.