SV
Product
Security Verify Access Docker
362
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 126Medium 117Low 4
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10534 | 9.8 | Aug 12 | IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-10543 | 9.8 | Aug 12 | IBM® Db2® is vulnerable to privilege escalation with a specially crafted query Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-10109 | 9.8 | Jun 30 | IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2018-1426 | 9.1 | Mar 22 | IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2026-105464 | 8.8 | Oct 12 | IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-105465 | 8.8 | Oct 12 | IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2025-33012 | 8.8 | Nov 7 | IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux could allow an authenticated user to regain access after… Affected: 10.5.0.0 through 10.5.0.11; 11.1.0 through 11.1.4.7; 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2023-42005 | 8.8 | May 29 | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls… Affected: 3.5; 3.5; 4.0; 4.0; 4.5; 4.5; +6 more |
| CVE-2023-27869 | 8.8 | Jul 10 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an… Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-27868 | 8.8 | Jul 10 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an… Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-27867 | 8.8 | Jul 10 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Injection Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2022-41296 | 8.8 | Dec 12 | IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the… Affected: 3.5; 3.5; 4.0; 4.0; 4.5; 4.5 |
| CVE-2021-29678 | 8.7 | Dec 9 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2025-36247 | 8.2 | Feb 17 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 is vulnerable to an XML external entity injection (XXE) attack… Affected: 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 12.1.0 through 12.1.3; 12.1.0 through 12.1.3; 12.1.0 through 12.1.3 |
| CVE-2026-87958 | 8.1 | Sep 10 | IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2020-4945 | 8.1 | Jun 24 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite arbirary files due to improper group permissions Affected: 11.5 |
| CVE-2026-10535 | 7.8 | Jul 30 | IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2026-9762 | 7.8 | Jul 17 | IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-36384 | 7.8 | Jan 30 | IBM Db2 for Windows 12.1.0 - 12.1.3 could allow a local user with filesystem access to escalate their privileges due to the use of an unquoted search path element Affected: 12.1.0 through 12.1.3 |
| CVE-2025-36186 | 7.8 | Nov 7 | IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations could allow a local user to execute malicious code that… Affected: 12.1.0 through 12.1.3; 12.1.0 through 12.1.3; 12.1.0 through 12.1.3 |
| CVE-2025-33092 | 7.8 | Jul 29 | IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking Affected: 12.1.0; 12.1.1; 12.1.2 |
| CVE-2024-35141 | 7.8 | Dec 19 | IBM Security Verify Access privilege escalation Affected: 10.0.0 through 10.0.6 |
| CVE-2023-47145 | 7.8 | Jan 7 | IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality Affected: 10.5 before 10.5.0.11; 11.1 before 11.1.4.7; 11.5 before 11.5.8 |
| CVE-2023-30431 | 7.8 | Jul 10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-27558 | 7.8 | Jul 10 | IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2019-4588 | 7.8 | May 26 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2020-5025 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking… Affected: 11.1.0.0 before 11.1.4.6; 11.5 before 11.5.5.0; 9.7; 9.7; 9.7; 9.7; +27 more |
| CVE-2020-4739 | 7.8 | Nov 20 | IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local… Affected: 11.5 before 11.5.5.0; 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0 |
| CVE-2020-4701 | 7.8 | Nov 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a… Affected: 10.5; 11.1; 11.5 |
| CVE-2020-4363 | 7.8 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which… Affected: 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0; 11.5.0.0 |
| CVE-2020-4204 | 7.8 | Feb 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2019-4322 | 7.8 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2019-4154 | 7.8 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2019-4014 | 7.8 | Apr 3 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2018-1936 | 7.8 | Apr 3 | IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2019-4094 | 7.8 | Mar 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1923 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1922 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2019-4016 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2019-4015 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1980 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1978 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1897 | 7.8 | Nov 30 | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1834 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to escalate their privileges to… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1802 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1781 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access by exploiting a symbolic link attack to… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1780 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 instance owner to obtain root access by exploiting a symbolic… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1711 | 7.8 | Sep 21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges due to allowing modification of columns… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1710 | 7.8 | Sep 21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerability that can potentially result in… Affected: 10.1; 10.5; 11.1 |
| CVE-2018-1566 | 7.8 | Jul 10 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to execute arbitrary code due to a format string error Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |