Lucene search
+L

353 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/14 12:00 a.m.8 views

IBM Informix Dynamic Server 12.10.x / 14.10.x < 14.10.xC13W13 / 15.0.x < 15.0.1.13 RCE (7282827)

The version of IBM Informix Dynamic Server installed on the remote host is 12.10.x, or 14.10.x prior to 14.10.xC13W13, or 15.0.x prior to 15.0.1.13. It is, therefore, affected by a remote code execution vulnerability in the IBM Informix Wire Listener as referenced in the 7282827 vendor advisory. ...

7.3CVSS6.7AI score0.00549EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/12 9:17 p.m.8 views

CVE-2026-13476

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

7.3CVSS0.00549EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 8:58 p.m.34 views

CVE-2026-13476 IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

7.3CVSS0.00549EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 8:58 p.m.48 views

CVE-2026-13476

IBM Informix Wire Listener vulnerability CVE-2026-13476 affects IBM Informix Dynamic Server versions 12.10, 14.10, and 15.0. An unauthenticated user could execute arbitrary commands with the system service account due to improper validation of user input, enabling remote code execution (RCE). CVS...

7.3CVSS5.7AI score0.00549EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/08/12 8:58 p.m.8 views

EUVD-2026-57627

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

7.3CVSS5.7AI score0.00549EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 8:53 p.m.73 views

CVE-2026-13367

IBM Informix Dynamic Server versions 14.10 and 15.0 are affected by a local privilege escalation in the oninit setuid-root utility (CVE-2026-13367). The root cause is improper access control in the oninit binary, enabling a local, non-remote attacker with low privileges to gain root privileges. C...

7.8CVSS5.2AI score0.001EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/08/12 8:53 p.m.10 views

EUVD-2026-57623

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

7.8CVSS5.2AI score0.001EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 8:53 p.m.29 views

CVE-2026-13367 IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

7.8CVSS0.001EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/12 8:53 p.m.7 views

CVE-2026-13367 IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

7.8CVSS5.2AI score0.001EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 8:53 p.m.5 views

CVE-2026-13367

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

7.8CVSS5.2AI score0.001EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/08/12 8:17 p.m.7 views

CVE-2026-13361

IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...

8.8CVSS0.00272EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 7:43 p.m.34 views

CVE-2026-13361 IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution

IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...

8.8CVSS0.00272EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/12 7:43 p.m.7 views

CVE-2026-13361 IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution

IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...

8.8CVSS5.5AI score0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 7:43 p.m.26 views

CVE-2026-13361

IBM Informix Dynamic Server is affected by CVE-2026-13361 through the oninit sq_sgkprepare path, enabling a stack-based buffer overflow via an unchecked SQL Interface length field, leading to remote code execution. Affected versions: Informix Dynamic Server 14.10, 12.10.x, and 15.0. The issue has...

8.8CVSS5.5AI score0.00272EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/08/12 7:43 p.m.9 views

EUVD-2026-57533

IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...

8.8CVSS5.5AI score0.00272EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 7:43 p.m.5 views

CVE-2026-13361

IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...

8.8CVSS5.5AI score0.00272EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/12 3:43 p.m.29 views

Security Bulletin: IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution (CVE-2026-13476)

Summary IBM Informix versions 12.10, 14.10 and 15.0 are vulnerable to an unauthenticated Remote Code Execution RCE vulnerability in the IBM Informix Wire Listener. Vulnerability Details CVEID:CVE-2026-13476 DESCRIPTION: IBM Informix could allow an unauthenticated user to execute arbitrary command...

7.3CVSS5.9AI score0.00549EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.5 views

PT-2026-71323

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server version 14.10 IBM Informix Dynamic Server version 15.0 Description A local privilege escalation issue exists in the oninit setuid-root utility. This allows a local user to gain elevated privileges on the system...

7.8CVSS5.3AI score0.001EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.4 views

PT-2026-71267

Name of the Vulnerable Software and Affected Versions IBM Informix affected versions not specified Description Remote code execution is possible in the sq sgkprepare function due to an unchecked length field within the SQL Interface. Recommendations At the moment, there is no information about a...

8.8CVSS6.2AI score0.00272EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/10 2:38 p.m.27 views

Security Bulletin: IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution (CVE-2026-13361)

Summary A remote code execution vulnerability exists in the SQL Interface component of IBM Informix Dynamic Server. An admitted SQL Interface client can send a specially crafted request to cause a stack-based buffer overflow. Vulnerability Details CVEID:CVE-2026-13361 DESCRIPTION: IBM Informix...

8.8CVSS6.7AI score0.00272EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder