CVE-2009-4326

The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature DPF is used, produces "repeating" return values, which might allow attackers to defeat protection mechanisms based on randomization by predicti...

EUVD-2014-6045

Malware in sbrugna...

EUVD-2014-8728

Malware in sbrugna...

EUVD-2003-0888

Malware in sbrugna...

EUVD-2018-12360

Malware in sbrugna...

EUVD-2019-13664

Malware in sbrugna...

EUVD-2010-3717

Malware in sbrugna...

EUVD-2019-13708

Malware in sbrugna...

EUVD-2019-14195

Malware in sbrugna...

EUVD-2024-35203

Malicious code in bioql PyPI...

CVE-2025-36117

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system...

CVE-2025-36116

Summary: CVE-2025-36116 affects IBM Db2 Mirror for i GUI versions 7.4, 7.5, and 7.6. The vulnerability is a cross-site WebSocket hijacking flaw that could allow an unauthenticated attacker to sniff an existing WebSocket connection and remotely perform operations the user is not allowed to perform...

CVE-2025-3050

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when using Q replication due to the improper allocation of CPU resources...

CVE-2024-25030

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281677...

Security Bulletin: Multiple IBM® Db2® security vulnerability fixes

Summary If you use IBM® Db2® as your database in your IBM Datacap deployment, please follow the Db2 security bulletins referred here to remedy the vulnerabilities. IBM® Db2® is vulnerable to denial of service under specific conditions CVE-2024-45663, CVE-2024-41761, CVE-2024-41762, CVE-2024-37071...

CVE-2023-29257 IBM Db2 code execution

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. IBM X-Force ID: 252011...

DB2 Suspicious Command Detection (drop database)

Binary data 5373.prm...

DB2 Suspicious Command Detection (sys)

Binary data 5372.prm...

DB2 Suspicious Command Detection (grant option)

Binary data 5370.prm...

DB2 Suspicious Command Detection (alter user)

Binary data 5379.prm...