4812 matches found
PT-2026-72091
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...
PT-2026-72097
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...
PT-2026-72093
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...
CVE-2026-16961
IBM i versions 7.4, 7.5, and 7.6 (feature 5770-SS1) are vulnerable to CWE-89 SQL injection in Db2 Mirror, allowing remote attackers to view, add, modify, or delete back-end database data. IBM has issued PTFs SJ10902 (7.6), SJ10908 (7.5), and SJ10910 (7.4) as remediation; no workarounds are provid...
CVE-2026-16961 IBM i is Affected By SQL Injection Vulnerability in Db2 Mirror []
IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...
EUVD-2026-57600
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-10534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-10534 IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-10534
IBM Db2 11.5.0–11.5.9 and 12.1.0–12.1.5 suffer a CWE-121 stack-based buffer overflow in the IXF IMPORT parser, exploitable locally for full confidentiality, integrity, and availability impact. IBM provides interim security updates: Security Update #87984 for V11.5.9 (APAR DT471716), #86025 for V1...
CVE-2026-10534 IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-10534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-16480
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data...
CVE-2026-18097
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files...
CVE-2026-18096
IBM Db2 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...
CVE-2026-10543
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query...
CVE-2026-10543 IBM® Db2® is vulnerable to privilege escalation with a specially crafted query
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query...
EUVD-2026-57621
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query...
CVE-2026-10543 IBM® Db2® is vulnerable to privilege escalation with a specially crafted query
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query...
CVE-2026-10543
IBM Db2 11.5.0‑11.5.9 and 12.1.0‑12.1.5 suffer from CWE-285 (Improper Authorization); a crafted query allows privilege escalation with no authentication needed (CVSS 9.8 CRITICAL per NVD). IBM withholds exploit details. Remediation: apply APAR DT472016 via Security Update #87984 (V11.5.9), #87349...