Page 4 of 96 results (0.010 seconds)

CVSS: 8.4EPSS: 0%CPEs: 39EXPL: 0

CVE-2019-4154

https://notcve.org/view.php?id=CVE-2019-4154

01 Jul 2019 — IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 158519. IBM DB2 para Linux, UNIX y Windows (incluye DB2 Connect Server) versiones 9.7, 10.1, 10.5, y 11.1 es vulnerable a un desbordamiento de búfer, lo que podría permitir que un atacante local autenticado ejecute código arbitrario en el sistema como root. IBM X-Force... • http://www.securityfocus.com/bid/109024 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.9EPSS: 0%CPEs: 40EXPL: 0

CVE-2019-4102

https://notcve.org/view.php?id=CVE-2019-4102

01 Jul 2019 — IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092. IBM DB2 para Linux, UNIX y Windows (incluye DB2 Connect Server) versiones 9.7, 10.1, 10.5, y 11.0 usa algoritmos criptográficos más débiles de lo esperado que permitiría que un atacante descifre información muy confidencial. ID de IBM X-Force: 158092. • http://www.securityfocus.com/bid/109026 • CWE-326: Inadequate Encryption Strength •

CVSS: 6.2EPSS: 0%CPEs: 37EXPL: 0

CVE-2019-4101

https://notcve.org/view.php?id=CVE-2019-4101

01 Jul 2019 — IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that have both EXECUTE on PD_GET_DIAG_HIST and access to the diagnostic directory on the DB2 server can cause the instance to crash. IBM X-Force ID: 158091. IBM DB2 para Linux, UNIX y Windows (incluye DB2 Connect Server) versiones 10.1, 10.5, y 11.1 es vulnerable a un ataque de Denegación de Servicio. Los usuarios que tienen EXECUTE en PD_GET_DIAG_HIST y el acceso al directorio ... • http://www.securityfocus.com/bid/109021 •

CVSS: 7.2EPSS: 0%CPEs: 37EXPL: 0

CVE-2019-4057

https://notcve.org/view.php?id=CVE-2019-4057

01 Jul 2019 — IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB2 instance account to leverage a fenced execution process to execute arbitrary code as root. IBM X-Force ID: 156567. IBM DB2 para Linux, UNIX y Windows (incluye DB2 Connect Server) versiones 9.7, 10.1, 10.5, y 11.1 podría permitir que un usuario malintencionado con acceso a la cuenta de la instancia de DB2 aproveche un proceso de ejecución cercado para ejecutar código a... • https://exchange.xforce.ibmcloud.com/vulnerabilities/156567 •

CVSS: 8.4EPSS: 0%CPEs: 37EXPL: 0

CVE-2019-4014

https://notcve.org/view.php?id=CVE-2019-4014

03 Apr 2019 — IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 155892. IBM DB2 para Linux, UNIX y Windows, en sus versiones 9.7, 10.1, 10.5 y 11.1 (incluido DB2 Connect Server), son vulnerables a un desbordamiento de búfer, lo que podría permitir que un atacante local autenticado ejecute código arbitrario en el sistema como root. ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/155892 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 8.4EPSS: 0%CPEs: 37EXPL: 0

CVE-2018-1936

https://notcve.org/view.php?id=CVE-2018-1936

03 Apr 2019 — IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 153316. En IBM DB2, en sus versiones 9.7, 10.1, 10.5 y 11.1, libdb2e.so.1 es vulnerable a un desbordamiento de búfer basado en pila provocado por una comprobación de límites incorrecta que podría conducir a que un atacante ejecute código arbitrario. IBM X-Force ID: 153316. • https://exchange.xforce.ibmcloud.com/vulnerabilities/153316 • CWE-787: Out-of-bounds Write •

CVSS: 8.4EPSS: 0%CPEs: 5EXPL: 0

CVE-2019-4094

https://notcve.org/view.php?id=CVE-2019-4094

19 Mar 2019 — IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to root by loading a malicious shared library. IBM X-Force ID: 158014. Los binarios de IBM DB2 para Linux, UNIX y Windows (incluye DB2 Connect Server) 9.7, 10.1, 10.5 y 11.1 cargan librerías compartidas desde una ruta no fiable, lo que podría otorgar a un usuario con pocos privilegios el acceso total a root, cargan... • https://exchange.xforce.ibmcloud.com/vulnerabilities/158014 • CWE-427: Uncontrolled Search Path Element •

CVSS: 8.4EPSS: 0%CPEs: 10EXPL: 0

CVE-2018-1922

https://notcve.org/view.php?id=CVE-2018-1922

11 Mar 2019 — IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152858. IBM DB2 para Linux, UNIX y WIndows (incluye DB2 Connect Server), en versiones 9.7, 10.1, 10.5 y 11.1, está afectado por una vulnerabilidad de desbordamiento de búfer que puede resultar en una ejecución de código arbitrario. IBM X-Force ID: 152858. • http://www.securityfocus.com/bid/107398 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.4EPSS: 0%CPEs: 10EXPL: 0

CVE-2019-4016

https://notcve.org/view.php?id=CVE-2019-4016

11 Mar 2019 — IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 155894. IBM DB2 para Linux, UNIX y Windows, en sus versiones 9.7, 10.1, 10.5 y 11.1 (incluido DB2 Connect Server), es vulnerable a un desbordamiento de búfer, lo que podría permitir que un atacante local autenticado ejecute código arbitrario en el sistema como root. IBM... • http://www.securityfocus.com/bid/107398 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 8.4EPSS: 0%CPEs: 10EXPL: 0

CVE-2018-1978

https://notcve.org/view.php?id=CVE-2018-1978

11 Mar 2019 — IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154069. IBM DB2 para Linux, UNIX y Windows, en sus versiones 9.7, 10.1, 10.5 y 11.1 (incluido DB2 Connect Server), es vulnerable a un desbordamiento de búfer, lo que podría permitir que un atacante local autenticado ejecute código arbitrario en el sistema como root. IBM... • http://www.securityfocus.com/bid/107398 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •