Lucene search
+L

4547 matches found

Positive Technologies
Positive Technologies
added 6 days ago5 views

PT-2026-71329

IBM Db2 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...

3.3CVSS5.2AI score0.00131EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 6 days ago4 views

PT-2026-71320

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query...

8.2CVSS5.2AI score0.00321EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 6 days ago3 views

PT-2026-71353

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description A buffer overflow exists in the IXF IMPORT parser. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

8.4CVSS5.7AI score0.00175EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 6 days ago4 views

PT-2026-71330

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files...

5.5CVSS5.2AI score0.00146EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added last week14 views

Security Bulletin: IBM Db2 Mirror for i is affected by multiple vulnerabilities

Summary The IBM Db2 Mirror for i GUI is affected by multiple vulnerabilities CVE-2026-17186, CVE-2026-17184, CVE-2026-17182, CVE-2026-17181, CVE-2026-16879, CVE-2026-17179, CVE-2026-16915, CVE-2026-17175, CVE-2026-18554, CVE-2026-17079, CVE-2026-16905, CVE-2026-17227, CVE-2026-17209,...

9.9CVSS5.8AI score0.01008EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added last week10 views

Security Bulletin: IBM i is Affected By SQL Injection Vulnerability in Db2 Mirror [CVE-2026-16961]

Summary IBM i is vulnerable to Structure Query Language SQL injection as a result of processing specially crafted statements CVE-2026-16961 in Db2 Mirror as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16961 DESCRIPTION: IBM i is vulnerable to SQL injection...

9.8CVSS5.7AI score0.0027EPSS
SaveExploits0Affected Software4
IBM Security Bulletins
IBM Security Bulletins
added last week25 views

Security Bulletin: IBM Db2 Mirror for i is vulnerable to OS command injection [CVE-2026-16956]

Summary IBM Db2 Mirror for i is vulnerable to OS command injection as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16956 DESCRIPTION: IBM Db2 Mirror for i could allow a remote attacker to execute arbitrary commands due to improper neutralization of special...

9.8CVSS5.8AI score0.01043EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added last week24 views

Security Bulletin: IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control (CVE-2026-9762)

Summary IBM® Db2® is vulnerable to remote code execution when jdbc url is under user control. Vulnerability Details CVEID:CVE-2026-9762 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control. CWE:CWE-94:...

7.8CVSS6.3AI score0.00165EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/07 8:40 p.m.12 views

Security Bulletin: IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak (CVE-2026-18096)

Summary IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak. Vulnerability Details CVEID:CVE-2026-18096 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...

3.3CVSS5.3AI score0.00131EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/07 8:39 p.m.8 views

Security Bulletin: IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data. (CVE-2026-16480)

Summary IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data. Vulnerability Details CVEID:CVE-2026-16480 DESCRIPTION: IBM Db2 is affected by an improper authorization...

4.3CVSS5.3AI score0.0032EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/07 8:37 p.m.15 views

Security Bulletin: IBM® Db2® is vulnerable to privilege escalation with a specially crafted query (CVE-2026-10543)

Summary IBM® Db2® is vulnerable to privilege escalation with a specially crafted query. Vulnerability Details CVEID:CVE-2026-10543 DESCRIPTION: IBM Db2 is vulnerable to privilege escalation with a specially crafted query. CWE:CWE-285: Improper Authorization CVSS Source: IBM CVSS Base score: 8.2...

8.2CVSS5.3AI score0.00321EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/07 8:36 p.m.15 views

Security Bulletin: IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser (CVE-2026-10534)

Summary IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser. Vulnerability Details CVEID:CVE-2026-10534 DESCRIPTION: Db2 is vulnerable to buffer overflow in the IXF IMPORT parser. CWE:CWE-121: Stack-based Buffer Overflow CVSS Source: IBM CVSS Base score: 8.4 CVSS...

9.8CVSS5.7AI score0.00175EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/07 2:48 p.m.14 views

Security Bulletin: Multiple vulnerabilities in IBM Semeru affects IBM® Db2® (April 2026 CPU)

Summary There are vulnerabilities in IBM Runtime Environment Java™ Version 8.0.8.60 and earlier, and IBM Semeru Version 21.0.10.0 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM Java SDK updates in April 2026 Vulnerability Details CVEID:CVE-2026-22021 DESCRIPTION:...

5.3CVSS6.1AI score0.00305EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/02 7:39 p.m.14 views

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in log4j core (CVE-2026-34477, CVE-2026-34478)

Summary IBM Db2 Developer Extension is affected by vulnerability in log4j core CVE-2026-34477, CVE-2026-34478 Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname verificatio...

7.5CVSS6.5AI score0.00831EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2026/07/31 12:0 a.m.13 views

IBM Db2 db2flacc buffer overflow vulnerability

IBM Db2 is a relational database management system that provides data storage, querying, and management capabilities, supporting enterprise-level applications. There is a buffer overflow vulnerability in IBM Db2. This vulnerability stems from the setgid helper program db2flacc, which fails to...

8.4CVSS5.9AI score0.00113EPSS
SaveExploits0
NVD
NVD
added 2026/07/30 7:17 p.m.10 views

CVE-2026-10695

IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated queries...

6.2CVSS0.00106EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/30 4:55 p.m.47 views

CVE-2026-10535 IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...

8.4CVSS0.00113EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/30 4:55 p.m.11 views

CVE-2026-10535

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...

8.4CVSS6.1AI score0.00113EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/30 4:55 p.m.15 views

EUVD-2026-51250

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...

8.4CVSS6.1AI score0.00113EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/30 4:55 p.m.13 views

CVE-2026-10695 IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries

IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated queries...

6.2CVSS5.5AI score0.00106EPSS
SaveExploits0References1
Rows per page
Query Builder