Show filters
127 Total Results
Displaying 41-50 of 127
Sort by:
Attacker Value
Unknown
CVE-2022-35637
Disclosure Date: September 12, 2022 (last updated October 08, 2023)
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL statement into the Db2expln tool. IBM X-Force ID: 230823.
0
Attacker Value
Unknown
CVE-2022-22390
Disclosure Date: June 23, 2022 (last updated February 24, 2025)
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973.
0
Attacker Value
Unknown
CVE-2022-22389
Disclosure Date: June 23, 2022 (last updated February 24, 2025)
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnormally when executing specially crafted SQL statements by an authenticated user. IBM X-Force ID: 2219740.
0
Attacker Value
Unknown
CVE-2021-39002
Disclosure Date: December 08, 2021 (last updated February 23, 2025)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
0
Attacker Value
Unknown
CVE-2021-38931
Disclosure Date: December 08, 2021 (last updated February 23, 2025)
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not authorized to select from. IBM X-Force ID: 210418.
0
Attacker Value
Unknown
CVE-2021-38926
Disclosure Date: December 08, 2021 (last updated October 07, 2023)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 210321.
0
Attacker Value
Unknown
CVE-2021-29678
Disclosure Date: December 08, 2021 (last updated February 23, 2025)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914.
0
Attacker Value
Unknown
CVE-2021-20373
Disclosure Date: December 08, 2021 (last updated October 07, 2023)
IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. IBM X-Force ID: 199521.
0
Attacker Value
Unknown
CVE-2021-29825
Disclosure Date: September 15, 2021 (last updated November 28, 2024)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP. IBM X-Force ID: 204470.
0
Attacker Value
Unknown
CVE-2021-29763
Disclosure Date: September 15, 2021 (last updated February 23, 2025)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. IBM X-Force ID: 202267.
0
