5218 matches found
CVE-2026-18096 IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak
IBM Db2 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...
CVE-2026-18096
IBM Db2 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...
CVE-2026-18096 IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak
IBM Db2 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...
CVE-2026-16956
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-16956
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by CVE-2026-16956 due to improper neutralization of special elements used in an OS command, enabling remote command execution. The vulnerability impacts IBM Db2 Mirror for i running these versions and is rated CVSS v3.1 base score 9.8 (...
CVE-2026-16956 IBM Db2 Mirror for i is vulnerable to OS command injection []
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
EUVD-2026-57380
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-16956 IBM Db2 Mirror for i is vulnerable to OS command injection []
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-10543: Improper Authorization
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query...
PT-2026-71327
Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description An improper authorization issue exists in a specific command that allows a non-privileged user to bypass authority checks and modify database catalog dat...
CVE-2026-16480: Client-Side Enforcement of Server-Side Security
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data...
CVE-2026-10534: Stack-based Buffer Overflow
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-18096: Allocation of Resources Without Limits or Throttling
IBM Db2 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...
PT-2026-71353
Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description A buffer overflow exists in the IXF IMPORT parser. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...
PT-2026-71320
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query...
PT-2026-71329
IBM Db2 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...
CVE-2026-16956: Improper Neutralization of Special Elements used in an OS Command
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-18097: Insertion of Sensitive Information into Log File
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files...
PT-2026-71330
Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description Local attackers can obtain sensitive information because plain text passwords are recorded in trace files. Recommendations At the moment, there is no...