Show filters
124 Total Results
Displaying 11-20 of 124
Sort by:
Attacker Value
Unknown
CVE-2019-4588
Disclosure Date: May 25, 2021 (last updated February 22, 2025)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks.
0
Attacker Value
Unknown
CVE-2020-4976
Disclosure Date: March 10, 2021 (last updated February 22, 2025)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force ID: 192469.
0
Attacker Value
Unknown
CVE-2020-5024
Disclosure Date: March 10, 2021 (last updated November 28, 2024)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the SSL handshake response. IBM X-Force ID: 193660.
0
Attacker Value
Unknown
CVE-2020-5025
Disclosure Date: March 10, 2021 (last updated February 22, 2025)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661.
0
Attacker Value
Unknown
CVE-2020-4642
Disclosure Date: December 22, 2020 (last updated November 28, 2024)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local attacker to cause a denial of service inside the "DB2 Management Service".
0
Attacker Value
Unknown
CVE-2020-4739
Disclosure Date: November 19, 2020 (last updated February 22, 2025)
IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 188149.
0
Attacker Value
Unknown
CVE-2020-4414
Disclosure Date: June 30, 2020 (last updated November 28, 2024)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service. IBM X-Force ID: 179989.
0
Attacker Value
Unknown
CVE-2020-4386
Disclosure Date: June 30, 2020 (last updated February 21, 2025)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to obtain sensitive information using a race condition of a symbolic link. IBM X-Force ID: 179268.
0
Attacker Value
Unknown
CVE-2020-4355
Disclosure Date: June 30, 2020 (last updated November 28, 2024)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service, caused by improper handling of Secure Sockets Layer (SSL) renegotiation requests. By sending specially-crafted requests, a remote attacker could exploit this vulnerability to increase the resource usage on the system. IBM X-Force ID: 178507.
0
Attacker Value
Unknown
CVE-2020-4420
Disclosure Date: June 30, 2020 (last updated February 21, 2025)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076.
0
