SV
Product
Security Verify Access Docker
362
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 126Medium 117Low 4
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-47158 | 6.5 | Jan 22 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1 and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service… Affected: 10.5.0.0 through 10.5.0.11; 11.1.0.0 through 11.1.4.7; 11.5 through 11.5.9 |
| CVE-2023-27859 | 6.5 | Jan 22 | IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases Affected: 10.5.0.0 through 10.5.0.11; 11.1.0.0 through 11.1.4.7; 11.5 through 11.5.9 |
| CVE-2023-50308 | 6.5 | Jan 22 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 under certain circumstances could allow an authenticated user to the database to cause a denial of service… Affected: before 11.5.9 |
| CVE-2023-47746 | 6.5 | Jan 22 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using… Affected: 10.5.0.0 through 10.5.0.11; 11.1.0.0 through 11.1.4.7; 11.5 through 11.5.9 |
| CVE-2023-29256 | 6.5 | Jul 10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain… Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2022-35637 | 6.5 | Sep 13 | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL statement into the Db2expln tool Affected: 10.5; 10.5; 10.5; 11.1; 11.1; 11.1; +3 more |
| CVE-2022-22483 | 6.5 | Sep 13 | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper… Affected: 9.7.0.0; 9.7.0.0; 9.7.0.0; 10.1; 10.1; 10.1; +9 more |
| CVE-2022-22389 | 6.5 | Jun 24 | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnormally when executing specially crafted… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2021-38931 | 6.5 | Dec 9 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read… Affected: 11.1; 11.5 |
| CVE-2021-29777 | 6.5 | Jun 24 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while being accessed in… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2021-20579 | 6.5 | Jun 24 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create a view or inline SQL function to obtain… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2020-4200 | 6.5 | Feb 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated attacker to send specially crafted commands to cause a denial… Affected: 10.5; 11.1; 11.5 |
| CVE-2020-4161 | 6.5 | Feb 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 could allow an authenticated attacker to cause a denial of service due to incorrect handling of certain… Affected: 11.5 |
| CVE-2019-4386 | 6.5 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would cause the server to crash Affected: 11.1.3 through 11.1.3.3; 11.1.4 through 11.1.4.4 |
| CVE-2018-1977 | 6.5 | Dec 14 | IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) contains a denial of service vulnerability Affected: 11.1; 11.1 |
| CVE-2018-1857 | 6.5 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow a user to bypass FGAC control and gain access to data they shouldn't be able to see Affected: 11.1 |
| CVE-2016-0215 | 6.5 | Jan 16 | IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service (daemon crash) via a SELECT… Affected: 9.7; 9.7; 9.7; 9.7; 9.7; 9.7; +22 more |
| CVE-2023-25930 | 5.9 | Apr 28 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of service Affected: 11.1 before 11.1.4; 11.5 before 11.5.8; 10.5; 10.5; 10.5; 10.5; +15 more |
| CVE-2019-4102 | 5.9 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2017-1519 | 5.9 | Sep 12 | IBM DB2 10.5 and 11.1 contains a denial of service vulnerability Affected: 10.5; 10.5.0.1; 10.5.0.2; 10.5.0.3; 10.5.0.3; 10.5.0.4; +4 more |
| CVE-2026-104332 | 5.5 | Oct 12 | IBM® Db2® Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-18097 | 5.5 | Aug 12 | IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-10695 | 5.5 | Jul 30 | IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries Affected: 12.1.0 through 12.1.4 |
| CVE-2026-7771 | 5.5 | Jul 17 | IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2026-6053 | 5.5 | May 27 | IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-13755 | 5.5 | May 26 | IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase buckets Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-36123 | 5.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36353 | 5.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36407 | 5.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36423 | 5.5 | Jan 30 | IBM Db2 Denial of Service Affected: 12.1.0 through 12.1.3 |
| CVE-2025-36136 | 5.5 | Nov 7 | IBM denial of service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36185 | 5.5 | Nov 7 | IBM Db2 denial of service Affected: 12.1.0 through 12.1.2 |
| CVE-2024-40679 | 5.5 | Jan 8 | IBM Db2 information disclosure Affected: 11.5 |
| CVE-2024-25030 | 5.5 | Apr 3 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log files that could be read by a local user Affected: 11.1 |
| CVE-2021-38926 | 5.5 | Dec 9 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2020-4642 | 5.5 | Dec 23 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local attacker to cause a denial of service inside the "DB2… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2019-4101 | 5.5 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2018-1799 | 5.5 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local unprivileged user to overwrite files on the system which could… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1685 | 5.5 | Sep 21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability in db2cacpy that could allow a local user to read any file on… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1452 | 5.5 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1451 | 5.5 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1450 | 5.5 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1449 | 5.5 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1428 | 5.5 | Mar 22 | IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1427 | 5.5 | Mar 22 | IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could overflow and cause a denial of service Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2017-1571 | 5.5 | Mar 22 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2023-33854 | 5.3 | Jun 22 | Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data. Affected: 4.8 before 5.4 |
| CVE-2025-14688 | 5.3 | Apr 30 | IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36428 | 5.3 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-1493 | 5.3 | May 5 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent… Affected: 12.1.0 through 12.1.1; 12.1.0 through 12.1.1; 12.1.0 through 12.1.1 |