4897 matches found
Design/Logic Flaw
IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors...
CVE-2009-3472
IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors...
Authorization
IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors...
Design/Logic Flaw
IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors...
CVE-2009-3471
IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors...
CVE-2009-3473
IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors...
CVE-2009-3473
IBM DB2 9.1 prior to Fix Pack 8 is affected by CVE-2009-3473, where a user can execute SET SESSION AUTHORIZATION without the SETSESSIONUSER privilege. The NVD description notes unspecified impact and remote attack vectors; OpenVAS/Nessus references also describe an unspecified vulnerability in th...
CVE-2009-3473
IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors...
CVE-2009-3471
CVE-2009-3471 affects IBM DB2 versions: 8.x before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2. The vulnerability is that the MODIFIED SQL DATA table function is not dropped when a definer loses required privileges, leading to an unspecified impact and potential remote vectors. The p...
CVE-2009-3472
The CVE-2009-3472 entry relates to IBM DB2 and specifies affected versions: IBM DB2 8.x before FP18, 9.1 before FP8, and 9.5 before FP4. The vulnerability allows remote authenticated users to bypass intended access restrictions and update, insert, or delete table rows via unspecified vectors. The...
CVE-2009-3472
IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors...
CVE-2009-3471
IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors...
IBM DB2 9.1 < 9.1 Fix Pack 8 Multiple Vulnerabilities
Binary data 5190.prm...
DB2 database ASCII half-fold method-injection method-vulnerability warning-the black bar safety net
Go from:Zhu Commander-in-chief DB2 database ASCII half-fold method injection method UNION way is temporarily not available. research, the air then toss, the project has encountered a DB2 database, the Internet wasn't full of information, shoving the whole of this part, the first Strip and the...
DB2 Monitoring Console Multiple Unspecified Security Bypass Vulnerabilities
The host is running IBM DMC and is prone to multiple Unspecified Security Bypass Vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2mcmultunspecifiedvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ DB2 Monitoring Console Multiple Unspecified Security Bypass Vulnerabilities Authors: Antu Sanadi...
DB2 Monitoring Console Version Detection
This script finds the installed DB2 Monitoring Console version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-7131
Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to gain access to a database via a link to a victim who is already connected to the database...
CVE-2008-7130
Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to upload arbitrary files via unknown vectors...
Design/Logic Flaw
Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to gain access to a database via a link to a victim who is already connected to the database...