4630 matches found
CVE-2026-16660
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
CVE-2026-16660 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
EUVD-2026-71488
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
CVE-2026-16660
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 contain an out-of-bounds read (CWE-125) that allows a remote attacker with no privileges to cause a denial of service . The CVSS v3.1 score is 5.3 (MEDIUM) , reflecting a network vector, low complexity, and low availability impact with no effect on ...
CVE-2026-17483 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure...
CVE-2026-17483
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by an improper authorization flaw (CWE-285) in an SQL procedure, allowing a local attacker to delete historical flight-recorder archives. The CVSS v3.1 score is 4.3 (Medium) with a network vector, low complexity, and low privileges requ...
EUVD-2026-71468
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure...
CVE-2026-18567
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
CVE-2026-18567 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
CVE-2026-18567
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by a TOCTOU race condition (CWE-367) involving a predictable Unix domain socket path in a world-writable directory. A local attacker with low privileges could exploit this to obtain information and cause minor availability impact, rated...
EUVD-2026-71602
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
CVE-2026-18567 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
Security Bulletin: IBM Db2 Mirror for i is affected by multiple vulnerabilities [CVE-2026-18567, CVE-2026-16660, CVE-2026-17483]
Summary IBM Db2 Mirror for i is affected by multiple vulnerabilities as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18567 DESCRIPTION: IBM Db2 Mirror for i could allow a local attacker to obtain information due to a race condition involving a predictable...
Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub
Summary The following dependency packages are being used by IBM Db2 Genius Hub had vulnerabilties which were resolved. - fastapi, follow-redirects, dompurify, bn.js, elliptic, form-data, js-yaml, poetry, golang.org/x/text, transformers, qs, langchain, brace-expansion, echarts, golang.org/x/sys,...
Security Bulletin: IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc. (CVE-2026-10535)
Summary IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc. Vulnerability Details CVEID:CVE-2026-10535 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc. CWE:CWE-121: Stack-based Buffer Overflow CVSS...
Security Bulletin: IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control (CVE-2026-9762)
Summary IBM® Db2® is vulnerable to remote code execution when jdbc url is under user control. Vulnerability Details CVEID:CVE-2026-9762 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control. CWE:CWE-94:...
Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities
Summary IBM Security Verify Governance ISVG, now re-branded as IBM Verify Identity Governance IVIG, uses IBM Db2 database and IBM Java SDK. Information about security vulnerabilities affecting IBM Db2 and IBM Java SDK has been published in security bulletins. Vulnerability Details Refer to the...
Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in commons-configuration2-2.10.1 (CVE-2026-45205)
Summary IBM® Db2® federated server is affected by a vulnerability in commons-configuration2-2.10.1 CVE-2026-45205 Vulnerability Details CVEID:CVE-2026-45205 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration...
Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 and IBM Db2 federated server shipped with IBM WebSphere Remote Server
Summary IBM Db2 and IBM Db2 federated server are shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM Db2 and IBM Db2 federated server has been published in a security bulletin CVE-2026-18096, CVE-2026-18097, CVE-2026-16480, CVE-2026-10543,...