Show filters
127 Total Results
Displaying 1-10 of 127
Sort by:
Attacker Value
Unknown

CVE-2023-30443

Disclosure Date: December 19, 2024 (last updated February 01, 2025)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query.
Attacker Value
Unknown

CVE-2024-41761

Disclosure Date: November 23, 2024 (last updated February 01, 2025)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.
Attacker Value
Unknown

CVE-2024-31881

Disclosure Date: June 12, 2024 (last updated August 08, 2024)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted query on certain columnar tables by an authenticated user. IBM X-Force ID: 287613.
Attacker Value
Unknown

CVE-2023-29267

Disclosure Date: June 12, 2024 (last updated August 08, 2024)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user. IBM X-Force ID: 287612.
Attacker Value
Unknown

CVE-2024-28762

Disclosure Date: June 12, 2024 (last updated August 08, 2024)
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 285246.
Attacker Value
Unknown

CVE-2024-27254

Disclosure Date: April 03, 2024 (last updated February 01, 2025)
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated server is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 283813.
Attacker Value
Unknown

CVE-2024-25046

Disclosure Date: April 03, 2024 (last updated February 01, 2025)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service by an authenticated user using a specially crafted query. IBM X-Force ID: 282953.
Attacker Value
Unknown

CVE-2024-25030

Disclosure Date: April 03, 2024 (last updated February 01, 2025)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281677.
Attacker Value
Unknown

CVE-2023-38729

Disclosure Date: April 03, 2024 (last updated February 01, 2025)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to sensitive information disclosure when using ADMIN_CMD with IMPORT or EXPORT.
Attacker Value
Unknown

CVE-2023-38003

Disclosure Date: December 04, 2023 (last updated December 08, 2023)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214.