Page 24 of 360 results (0.011 seconds)

CVSS: 10.0EPSS: 0%CPEs: 26EXPL: 0

CVE-2010-3193

https://notcve.org/view.php?id=CVE-2010-3193

31 Aug 2010 — Unspecified vulnerability in the DB2STST program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 has unknown impact and attack vectors. Vulnerabilidad sin especificar en el programa DB2STST en IBM DB2 v9.1 anterior a FP9, v9.5 anterior a FP6, y v9.7 anterior a FP2 tienen un impacto y vactores de ataque desconocidos. • ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2010-3196

https://notcve.org/view.php?id=CVE-2010-3196

31 Aug 2010 — IBM DB2 9.7 before FP2, when AUTO_REVAL is IMMEDIATE, allows remote authenticated users to cause a denial of service (loss of privileges) to a view owner by defining a dependent view. IBM DB2 v9.7 anterior a FP2, cuando AUTO_REVAL está IMMEDIATE, permite a usuarios autenticados remotamente provocar una denegación de servicio (pérdida de privilegios) de una vista propietario mediante definición a una vista dependiente. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC67008 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2010-3197

https://notcve.org/view.php?id=CVE-2010-3197

31 Aug 2010 — IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors. IBM DB2 v9.7 anterior a FP2 no realiza correctamente el control de acceso en el monitor de vistas administrativas en el esquema SYSIBMADM, lo que permite a atacantes remotos obtener información sensible a través de vectores sin especificar. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC67819 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.5EPSS: 1%CPEs: 12EXPL: 0

CVE-2010-1560

https://notcve.org/view.php?id=CVE-2010-1560

27 Apr 2010 — Buffer overflow in the REPEAT function in IBM DB2 9.1 before FP9 allows remote authenticated users to cause a denial of service (trap) via unspecified vectors. NOTE: this might overlap CVE-2010-0462. Un desbordamiento de búfer en la función REPEAT en DB2 de IBM versión 9.1 anterior a FP9, permite a los usuarios autenticados remotos causar una denegación de servicio (trampa) por medio de vectores no especificados. NOTA: esto podría solaparse al CVE-2010-0462. • http://attrition.org/pipermail/vim/2010-April/002341.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 10.0EPSS: 0%CPEs: 14EXPL: 0

CVE-2010-1041

https://notcve.org/view.php?id=CVE-2010-1041

22 Mar 2010 — Unspecified vulnerability in the single sign-on functionality in the Web Services implementation in IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13 has unknown impact and remote attack vectors. Vulnerabilidad no especificada en la funcionalidad sing-on en la implementación de Web Services en IBM DB2 Content Manager (CM) Toolkit v8.3 anteriores a FP13 en z/OS y DB2 Information Integrator para Content v8.3 anteriores a FP13, tiene un impa... • http://secunia.com/advisories/39025 •

CVSS: 7.5EPSS: 33%CPEs: 1EXPL: 2

CVE-2010-0472

https://notcve.org/view.php?id=CVE-2010-0472

02 Feb 2010 — kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a denial of service (daemon crash) via a certain byte sequence. kuddb2 en Tivoli Monitoring para DB2, distribuidas en IBM DB2 v9.7 FP1 en Linux, permite a atacantes remotos causar una denegación de servicio (cuelgue del demonio) a través de una secuencia de bytes determinada. • http://intevydis.blogspot.com/2010/01/ibm-db2-97-kuddb2-dos.html •

CVSS: 8.8EPSS: 11%CPEs: 26EXPL: 3

CVE-2010-0462 – IBM DB2 - 'REPEAT()' Local Heap Buffer Overflow

https://notcve.org/view.php?id=CVE-2010-0462

28 Jan 2010 — Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impact via a SELECT statement that has a long column name generated with the REPEAT function. Un desbordamiento de búfer en la región heap de la memoria en DB2 de IBM versión 9.1 anterior a FP9, versión 9.5 anterior a FP6 y versión 9.7 anterior a FP2, permite a los usuarios autenticados remotos tener un impacto no especificado por medio de una declaración SELECT q... • https://www.exploit-db.com/exploits/33572 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.1EPSS: 0%CPEs: 19EXPL: 0

CVE-2009-4438

https://notcve.org/view.php?id=CVE-2009-4438

28 Dec 2009 — The Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not enforce privilege requirements for access to a (1) sequence or (2) global-variable object, which allows remote authenticated users to make use of data via unspecified vectors. El componente Query Compiler, Rewrite, and Optimizer en IBM DB2 v9.1 anteriores a FP8, v9.5 anteriores a FP5, v9.7 anteriores a FP1 no refuerza los requisitos de privilegios para acceder a (1) una secuencia o (2)... • ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.5EPSS: 0%CPEs: 8EXPL: 0

CVE-2009-4439

https://notcve.org/view.php?id=CVE-2009-4439

28 Dec 2009 — Unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (instance crash) by compiling a SQL query. Vulnerabilidad no especificada en el componente Query Compiler, Rewrite, and Optimizer en IBM DB2 v9.5 anteriores a FP5 permite a usuarios autenticados remotamente provocar una denegación de servicio (parada de la instancia) al compilar una consulta SQL. • ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT •

CVSS: 9.1EPSS: 0%CPEs: 37EXPL: 2

CVE-2009-4325

https://notcve.org/view.php?id=CVE-2009-4325

16 Dec 2009 — The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers." El componente Client Interfaces en IBM DB2 v8.2 anterior a FP18, v9.1 anterior a FP8, v9.5 anterior a FP5 y v9.7 anterior a FP1, no valida adecuadamente un puntero no especificado, lo que permite a atacantes sobrescribir la memoria exte... • ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT • CWE-20: Improper Input Validation •