Lucene search
+L

8 matches found

NVD
NVD
•added 2026/10/16 6:17 p.m.•8 views

CVE-2026-109839

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...

3.1CVSS0.0062EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/16 5:37 p.m.•23 views

CVE-2026-109839

IBM Db2 Genius Hub 1.0 is vulnerable to a security restriction bypass because of a missing initialization vector in its cryptographic algorithm (CWE-325). This flaw could be exploited by a remote authenticated attacker to impact the integrity of the system. To remediate this vulnerability, users ...

3.1CVSS7.9AI score0.0062EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/16 5:37 p.m.•10 views

EUVD-2026-103023

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...

3.1CVSS8AI score0.0062EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/16 5:37 p.m.•28 views

CVE-2026-109839 IBM Db2 Genius Hub Missing Cryptographic Step

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...

3.1CVSS0.0062EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•6 views

PT-2026-116000

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...

3.1CVSS8AI score0.0062EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/14 8:05 p.m.•11 views

Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub (Db2IC)

Summary Dependency updates and code fixes were done to fix multiple vulnerabilties found in Db2 intelligence center. Vulnerability Details CVEID:CVE-2026-109838 DESCRIPTION: IBM Db2 Genius Hub could allow a local attacker to obtain sensitive information due to improper verification of cryptograph...

8.8CVSS6.4AI score0.01692EPSS
SaveExploits1Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/13 1:36 a.m.•13 views

GHSA-R9Q2-3R6X-QMGP Inadequate Encryption Strength in Jenkins

Jenkins before versions 2.44 and 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks SECURITY-304...

4.3CVSS5.9AI score0.01045EPSS
SaveExploits0References5
PyPA
PyPA
•added 2012/08/26 9:55 p.m.•16 views

PYSEC-2012-13

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS6.4AI score0.01681EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder