SV
Product
Security Verify Access Docker
362
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 126Medium 117Low 4
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1487 | 7.8 | Jul 10 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1458 | 7.8 | Jul 10 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1565 | 7.8 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1544 | 7.8 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1488 | 7.8 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute… Affected: 10.5; 11.1; 10.5; 11.1 |
| CVE-2018-1459 | 7.8 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to stack based buffer overflow, caused by improper bounds checking which… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2017-1677 | 7.8 | Mar 22 | IBM Data Server Driver for JDBC and SQLJ (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) deserializes the contents of /tmp/connlicj.bin which leads to object… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2017-1452 | 7.8 | Sep 12 | IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to obtain elevated privilege and overwrite DB2 files Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +23 more |
| CVE-2017-1451 | 7.8 | Sep 12 | IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +23 more |
| CVE-2026-18166 | 7.7 | Oct 12 | IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-15955 | 7.5 | Sep 14 | IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-86093 | 7.5 | Sep 10 | IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-6938 | 7.5 | May 27 | IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query Affected: 12.1.0 through 12.1.4 |
| CVE-2026-6052 | 7.5 | May 27 | IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2026-6051 | 7.5 | May 27 | IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2026-1718 | 7.5 | May 27 | IBM® Db2® is vulnerable to a denial of service with a specially crafted query when running an AUTONOMOUS procedure Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-36442 | 7.5 | Jan 30 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as the server may crash under certain… Affected: 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 12.1.0 through 12.1.3; 12.1.0 through 12.1.3; 12.1.0 through 12.1.3 |
| CVE-2025-36365 | 7.5 | Jan 30 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 under specific configuration of cataloged remote storage aliases could allow… Affected: 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 12.1.0 through 12.1.3; 12.1.0 through 12.1.3; 12.1.0 through 12.1.3 |
| CVE-2025-36070 | 7.5 | Jan 30 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as a trap may occur when selecting from… Affected: 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 12.1.0 through 12.1.3; 12.1.0 through 12.1.3; 12.1.0 through 12.1.3 |
| CVE-2025-2534 | 7.5 | Nov 7 | IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as… Affected: 11.1.0 through 11.1.4.7; 11.1.0 through 11.1.4.7; 11.1.0 through 11.1.4.7; 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; +3 more |
| CVE-2024-47118 | 7.5 | Nov 7 | IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable… Affected: 10.5.0.0 through 10.5.0.11; 10.5.0.0 through 10.5.0.11; 10.5.0.0 through 10.5.0.11; 11.1.0 through 11.1.4.7; 11.1.0 through 11.1.4.7; 11.1.0 through 11.1.4.7; +6 more |
| CVE-2025-36071 | 7.5 | Jul 29 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash… Affected: 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 12.1.0 through 12.1.2; 12.1.0 through 12.1.2; 12.1.0 through 12.1.2 |
| CVE-2025-33114 | 7.5 | Jul 29 | IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to denial of service with a specially crafted query under certain non-default conditions Affected: 12.1.0; 12.1.1; 12.1.2 |
| CVE-2024-51473 | 7.5 | Jul 29 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is… Affected: 10.5.0.0 through 10.5.0.11; 10.5.0.0 through 10.5.0.11; 10.5.0.0 through 10.5.0.11; 11.1.0 through 11.1.4.7; 11.1.0 through 11.1.4.7; 11.1.0 through 11.1.4.7; +6 more |
| CVE-2024-49828 | 7.5 | Jul 29 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is… Affected: 10.5.0.0 through 10.5.0.11; 10.5.0.0 through 10.5.0.11; 10.5.0.0 through 10.5.0.11; 11.1.0 through 11.1.4.7; 11.1.0 through 11.1.4.7; 11.1.0 through 11.1.4.7; +6 more |
| CVE-2025-36010 | 7.5 | Jul 29 | IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to… Affected: 12.1.0; 12.1.1; 12.1.2 |
| CVE-2025-2533 | 7.5 | Jul 29 | IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query Affected: 12.1.0; 12.1.1; 12.1.2 |
| CVE-2025-2518 | 7.5 | May 29 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash… Affected: 11.5 through 11.5.9; 11.5 through 11.5.9; 11.5 through 11.5.9; 12.1.0 through 12.1.1; 12.1.0 through 12.1.1; 12.1.0 through 12.1.1 |
| CVE-2024-49350 | 7.5 | May 29 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as… Affected: 11.1 through 11.1.4.7; 11.1 through 11.1.4.7; 11.1 through 11.1.4.7; 11.5 through 11.5.9; 11.5 through 11.5.9; 11.5 through 11.5.9; +3 more |
| CVE-2024-52903 | 7.5 | May 1 | IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query Affected: 12.1.0 through 12.1.1 |
| CVE-2024-45663 | 7.5 | Nov 21 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, 11.5, and 12.1 is vulnerable to a denial of service as the server may crash under certain conditions with a… Affected: 11.1.4 through 11.1.4.7; 11.5.0 through 11.5.9; 12.1 |
| CVE-2023-47152 | 7.5 | Jan 22 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under… Affected: before 11.5.9 |
| CVE-2023-45193 | 7.5 | Jan 22 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used Affected: before 11.5.9 |
| CVE-2023-40687 | 7.5 | Dec 4 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table Affected: through 10.5.0.11; 11.1.0.0 through 11.1.4.7; 11.5 through 11.5.9 |
| CVE-2023-38727 | 7.5 | Dec 4 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted SQL statement Affected: 10.5.0.0 through 10.5.0.11; 11.1.0.0 through 11.1.4.7; 11.5 through 11.5.9 |
| CVE-2023-29258 | 7.5 | Dec 4 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated query on specific… Affected: 11.1.0.0 through 11.1.4.7; 11.5 through 11.5.9 |
| CVE-2023-47701 | 7.5 | Dec 4 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query Affected: 10.5.0.0 through 10.5.0.11; 11.1.0.0 through 11.1.4.7; 11.5 through 11.5.9 |
| CVE-2023-46167 | 7.5 | Dec 4 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used Affected: 11.5.6 through 11.5.8 |
| CVE-2023-40692 | 7.5 | Dec 4 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions Affected: 10.5; 10.5; 10.5; 11.1; 11.1; 11.1; +3 more |
| CVE-2023-45178 | 7.5 | Dec 3 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used Affected: 11.5; 11.5; 11.5 |
| CVE-2023-40373 | 7.5 | Oct 17 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table expressions Affected: 11.5 through 11.5.8; 10.5; 10.5; 10.5; 10.5; 10.5; +14 more |
| CVE-2023-40372 | 7.5 | Oct 17 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables Affected: 11.5 through 11.5.8 |
| CVE-2023-40374 | 7.5 | Oct 16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted query statement Affected: 11.5 through 11.5.8 |
| CVE-2023-30991 | 7.5 | Oct 16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query Affected: 11.5 through 11.5.8; 11.1.4; 11.1.4; 11.1.4; 11.1.4; 11.1.4; +2 more |
| CVE-2023-38740 | 7.5 | Oct 16 | IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement Affected: 11.5 through 11.5.8 |
| CVE-2023-38728 | 7.5 | Oct 16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted XML query statement Affected: 11.5 before 11.5.8; 10.5; 10.5; 10.5; 10.5; 10.5; +14 more |
| CVE-2023-38720 | 7.5 | Oct 16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 and 11.5 is vulnerable to denial of service with a specially crafted ALTER TABLE statement Affected: 11.5 before 11.5.8; 11.1.4; 11.1.4; 11.1.4; 11.1.4; 11.1.4; +2 more |
| CVE-2023-30987 | 7.5 | Oct 16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases Affected: 11.5 before 11.5.8; 10.5; 10.5; 10.5; 10.5; 10.5; +13 more |
| CVE-2023-30449 | 7.5 | Jul 10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-30448 | 7.5 | Jul 10 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables Affected: 10.5.0.11; 11.1.4.7; 11.5 |
