7066 matches found
CVE-2014-6209: Improper Input Validation
IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash by specifying an identity column within a crafted ALTER TABLE statement...
CVE-2014-6210: Improper Input Validation
IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash by specifying the same column within multiple ALTER TABLE statements...
IBM DB2 9.7 < Fix Pack 10 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 9.7 running on the remote host is affected by the following vulnerabilities : - An input-validation error exists related to handling the 'ALTER MODULE' statement that allows buffer overflows. CVE-2014-3094 - An error exists related to handling...
CVE-2014-6097
IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted ALTER TABLE statement...
Code injection
IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when immediate AUTOREVAL is enabled, allows remote authenticated users to cause a denial of service daemon crash via a crafted ALTER TABLE statement...
Code injection
IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted ALTER TABLE statement...
CVE-2014-6097
IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted ALTER TABLE statement...
CVE-2014-6159: Improper Input Validation
IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when immediate AUTOREVAL is enabled, allows remote authenticated users to cause a denial of service daemon crash via a crafted ALTER TABLE statement...
PT-2014-7042
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 before FP10 IBM DB2 versions 9.8 through FP5 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash, by utilizing a crafted ALTER TABLE statement. Recommendations...
CVE-2014-6097: Improper Input Validation
IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted ALTER TABLE statement...
PT-2014-7074
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 before FP10 IBM DB2 versions 9.8 through FP5 IBM DB2 versions 10.1 through FT4 IBM DB2 versions 10.5 through FP4 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon...
IBM DB2 10.5 < Fix Pack 4 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 10.5 running on the remote host is affected by the following vulnerabilities : - An error exists related to JavaScript Object Notation JSON-C handling, string parsing, and the hash function that allows denial of service attacks. CVE-2013-6371 ...
CVE-2014-3094
Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement...
Stack overflow
Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement...
CVE-2014-3094
Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement...
PT-2014-5085
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through 9.7 FP9a IBM DB2 versions 9.8 through 9.8 FP5 IBM DB2 versions 10.1 through 10.1 FP4 IBM DB2 versions 10.5 before 10.5 FP4 Description A stack-based buffer overflow issue allows remote authenticated users to execut...
CVE-2014-3094: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement...
MySQL 3.x/4.x ALTER TABLE/RENAME Forces Old Permission Checks
No description provided by source. source: http://www.securityfocus.com/bid/11357/info MySQL is reported prone to multiple local vulnerabilities. Exploiting these issues may allow an attacker to bypass security restrictions or cause a denial-of-service condition in the application. Rportedly, an...
Oracle 9.x Database Parameter/Statement Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9587/info Oracle database has been reported prone to multiple buffer overflow vulnerabilities when processing certain parameters and functions. Specifically the TIMEZONE parameter, NUMTOYMINTERVAL, NUMTODSINTERVAL and...
Oracle 10g Alter Session Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19201/info Oracle 10g is reportedly prone to a integer-overflow vulnerability because the application fails to allocate a large enough data type to accommodate user-supplied input before using it in a query. This issue ha...