sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in ip-address(CVE-2026-101910, CVE-2026-101911, CVE-2026-101912, CVE-2026-101913)

Summary IBM Db2 Developer Extension is affected by vulnerability in ip-addressCVE-2026-101910, CVE-2026-101911, CVE-2026-101912, CVE-2026-101913 Vulnerability Details CVEID:CVE-2026-101910 DESCRIPTION: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Fro...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in brace-expansion(CVE-2026-102276, CVE-2026-102277, CVE-2026-102278)

Summary IBM Db2 Developer Extension is affected by vulnerability in brace-expansionCVE-2026-102276, CVE-2026-102277, CVE-2026-102278 Vulnerability Details CVEID:CVE-2026-102276 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-websocket(CVE-2026-76183, CVE-2026-77791,CVE-2026-79677,CVE-2026-87022)

Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-websocketCVE-2026-76183, CVE-2026-77791,CVE-2026-79677,CVE-2026-87022 Vulnerability Details CVEID:CVE-2026-76183 DESCRIPTION: Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the securit...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in ip-address(CVE-2026-111997)

Summary IBM Db2 Developer Extension is affected by vulnerability in ip-addressCVE-2026-111997 Vulnerability Details CVEID:CVE-2026-111997 DESCRIPTION: ip-address before 10.7.4 allows a denial of service CPU consumption from quadratic complexity, and application stall via many % characters in inpu...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core (CVE-2026-73581,CVE-2026-75973,CVE-2026-77756,CVE-2026-77762,CVE-2026-78383,CVE-2026-78437,CVE-2026-86350)

Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core CVE-2026-73581,CVE-2026-75973,CVE-2026-77756,CVE-2026-77762,CVE-2026-78383,CVE-2026-78437,CVE-2026-86350 Vulnerability Details CVEID:CVE-2026-73581 DESCRIPTION: Improper Check for Certificate Revocation...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in jackson-databind (CVE-2026-89407, CVE-2026-89425)

Summary IBM Db2 Developer Extension is affected by vulnerability in jackson-databind CVE-2026-89407, CVE-2026-89425 Vulnerability Details CVEID:CVE-2026-89407 DESCRIPTION: NumberInput.looksLikeValidNumber in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions:...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in source-map-js (CVE-2026-93749)

Summary IBM Db2 Developer Extension is affected by vulnerability in source-map-js CVE-2026-93749 Vulnerability Details CVEID:CVE-2026-93749 DESCRIPTION: source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in jackson-databind (CVE-2026-91776, CVE-2026-91777)

Summary IBM Db2 Developer Extension is affected by vulnerability in jackson-databind CVE-2026-91776, CVE-2026-91777 Vulnerability Details CVEID:CVE-2026-91776 DESCRIPTION: TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw,...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in fast-uri (CVE-2026-84292, CVE-2026-84394, CVE-2026-86472)

Summary IBM Db2 Developer Extension is affected by vulnerability in fast-uri CVE-2026-84292, CVE-2026-84394, CVE-2026-86472 Vulnerability Details CVEID:CVE-2026-84292 DESCRIPTION: fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo a...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in jackson-databind (CVE-2026-19032)

Summary IBM Db2 Developer Extension is affected by vulnerability in jackson-databind CVE-2026-19032 Vulnerability Details CVEID:CVE-2026-19032 DESCRIPTION: jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in spring-context-support(CVE-2026-59280)

Summary IBM Db2 Developer Extension is affected by vulnerability in spring-context-supportCVE-2026-59280 Vulnerability Details CVEID:CVE-2026-59280 DESCRIPTION: Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a vi...

Security Bulletin: IBM Db2 Bridge is vulnerable due to Authlib, urllib3, jackson-databind, source-map-js, Axios, and python-jose

Summary Authlib, urllib3, jackson-databind, source-map-js, Axios, and python-jose is used as part of IBM Db2 Bridge and it was affected by vulnerabilities described in the vulnerability details. This issue Affected users using Db2 Bridge 1.1.5.2 and new Fix pack was release to address the issue...

Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM License Metric Tool

Summary IBM DB2 is shipped with IBM License Metric Tool. Information about security vulnerabilities affecting IBM DB2 has been published in separate security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in jackson-databind (CVE-2026-59283)

Summary IBM Db2 Developer Extension is affected by vulnerability in jackson-databind CVE-2026-59283 Vulnerability Details CVEID:CVE-2026-59283 DESCRIPTION: Applications that evaluate Spring Expression Language SpEL expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypa...

Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Multiple vulnerabilities were found in IBM Db2 LUW that affect Platform System Manager PSM and Db2 pattern Type pType shipped with IBM Cloud Pak System. Those vulnerabilities were addressed in IBM Cloud Pak System CPS 2.3.6.2. Vulnerability Details CVEID:CVE-2025-36122 DESCRIPTION: IBM Db...

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM® Db2®

Summary IBM Virtualization Engine TS7700 is susceptible to vulnerabilities that could permit remote code execution, privilege escalation, unauthorized access to information, modification of data, or denial of service due to the use of IBM Db2. TS7700 embeds Db2 internally to manage metadata...

CVE-2026-109839

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...

CVE-2026-109838

IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature...

CVE-2026-109838 IBM Db2 Genius Hub Improper verification of cryptographic signature

IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature...