Show filters
375 Total Results
Displaying 31-40 of 375
Sort by:
Attacker Value
Unknown
CVE-2023-47741
Disclosure Date: December 18, 2023 (last updated December 23, 2023)
IBM i 7.3, 7.4, 7.5, IBM i Db2 Mirror for i 7.4 and 7.5 web browser clients may leave clear-text passwords in browser memory that can be viewed using common browser tools before the memory is garbage collected. A malicious actor with access to the victim's PC could exploit this vulnerability to gain access to the IBM i operating system. IBM X-Force ID: 272532.
0
Attacker Value
Unknown
CVE-2023-40687
Disclosure Date: December 04, 2023 (last updated December 08, 2023)
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table. IBM X-Force ID: 264809.
0
Attacker Value
Unknown
CVE-2023-38727
Disclosure Date: December 04, 2023 (last updated December 08, 2023)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted SQL statement. IBM X-Force ID: 262257.
0
Attacker Value
Unknown
CVE-2023-29258
Disclosure Date: December 04, 2023 (last updated December 08, 2023)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated query on specific federation objects. IBM X-Force ID: 252048.
0
Attacker Value
Unknown
CVE-2023-47701
Disclosure Date: December 04, 2023 (last updated December 08, 2023)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 266166.
0
Attacker Value
Unknown
CVE-2023-46167
Disclosure Date: December 04, 2023 (last updated December 08, 2023)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367.
0
Attacker Value
Unknown
CVE-2023-38003
Disclosure Date: December 04, 2023 (last updated December 08, 2023)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214.
0
Attacker Value
Unknown
CVE-2023-40692
Disclosure Date: December 04, 2023 (last updated December 08, 2023)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807.
0
Attacker Value
Unknown
CVE-2023-45178
Disclosure Date: December 03, 2023 (last updated December 08, 2023)
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073.
0
Attacker Value
Unknown
CVE-2023-40373
Disclosure Date: October 17, 2023 (last updated October 20, 2023)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574.
0
