SV
Product
Security Verify Access Docker
362
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 126Medium 117Low 4
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-30447 | 7.5 | Jul 10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-30446 | 7.5 | Jul 10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-30445 | 7.5 | Jul 10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-30442 | 7.5 | Jul 10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a… Affected: 11.1.4.7; 11.5 |
| CVE-2023-26022 | 7.5 | Apr 28 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash when an Out of Memory occurs using the DBMS_OUTPUT… Affected: 11.1 before 11.1.4; 11.5 before 11.5.8; 10.5; 10.5; 10.5; 10.5; +15 more |
| CVE-2023-26021 | 7.5 | Apr 28 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service as the server may crash when compiling a specially crafted SQL… Affected: 11.1 before 11.1.4; 11.5 before 11.5.8; 11.1.4; 11.1.4; 11.1.4; 11.1.4; +3 more |
| CVE-2023-27555 | 7.5 | Apr 28 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 is vulnerable to a denial of service when attempting to use ACR client affinity for unfenced DRDA federation… Affected: 11.1 before 11.1.4; 11.5 before 11.5.8; 10.5; 10.5; 10.5; 10.5; +15 more |
| CVE-2023-29255 | 7.5 | Apr 27 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a variation of an… Affected: 11.1 before 11.1.4; 11.5 before 11.5.8; 10.5; 10.5; 10.5; 10.5; +15 more |
| CVE-2023-27559 | 7.5 | Apr 26 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted… Affected: 11.1 before 11.1.4; 11.5 before 11.5.8; 10.5; 10.5; 10.5; 10.5; +15 more |
| CVE-2022-43930 | 7.5 | Feb 17 | IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to an Information Disclosure as sensitive information may be included in a log file Affected: 10.5; 11.1; 11.5 |
| CVE-2022-43929 | 7.5 | Feb 17 | IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command Affected: 11.1; 11.1; 11.1; 11.5; 11.5; 11.5 |
| CVE-2022-43927 | 7.5 | Feb 17 | IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used Affected: 10.5; 10.5; 10.5; 11.1; 11.1; 11.1; +3 more |
| CVE-2022-22390 | 7.5 | Jun 24 | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2021-39002 | 7.5 | Dec 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2021-20373 | 7.5 | Dec 9 | IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2021-29825 | 7.5 | Sep 16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP Affected: 11.1; 11.5 |
| CVE-2021-29703 | 7.5 | Jun 24 | Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2021-29702 | 7.5 | Jun 16 | Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when executing a specially… Affected: 11.1 through 11.1.4; 11.5 through 11.5.5.0 |
| CVE-2020-5024 | 7.5 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang… Affected: 11.1.0.0 before 11.1.4.6; 11.5 before 11.5.5.0; 9.7; 9.7; 9.7; 9.7; +27 more |
| CVE-2020-4420 | 7.5 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang… Affected: 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0; 11.5.0.0 |
| CVE-2020-4135 | 7.5 | Feb 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to send specially crafted packets to cause a… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2017-1297 | 7.3 | Jun 27 | IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking… Affected: 9.7; 9.7; 9.7; 9.7; 9.7; 10.1; +14 more |
| CVE-2016-5995 | 7.3 | Oct 1 | Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via… Affected: 9.7; 9.7; 9.7; 9.7; 9.7; 9.7; +34 more |
| CVE-2025-36184 | 7.2 | Jan 30 | IBM Db2 Privilege Escalation Affected: 11.5.0 through 11.5.9 |
| CVE-2023-38003 | 7.2 | Dec 4 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have… Affected: 10.5; 10.5; 10.5; 11.1; 11.1; 11.1; +3 more |
| CVE-2023-29257 | 7.2 | Apr 26 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may… Affected: 11.1 before 11.1.4; 11.5 before 11.5.8; 10.5; 10.5; 10.5; 10.5; +15 more |
| CVE-2026-16480 | 7.1 | Aug 12 | IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data. Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2018-1448 | 7.1 | Mar 22 | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a local user to overwrite arbitrary files… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2017-1105 | 7.1 | Jun 27 | IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files… Affected: 9.7; 9.7; 9.7; 9.7; 9.7; 10.1; +14 more |
| CVE-2018-1515 | 7.0 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1, under specific or unusual conditions, could allow a local user to overflow a buffer which may… Affected: 10.5; 11.1; 10.5; 11.1 |
| CVE-2023-35012 | 6.7 | Jul 17 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds… Affected: 11.5 |
| CVE-2020-4230 | 6.7 | Feb 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privilege when an authenticated local attacker with special… Affected: 11.1; 11.5 |
| CVE-2019-4057 | 6.7 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB2 instance account to leverage a fenced… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2017-1439 | 6.7 | Sep 12 | IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +23 more |
| CVE-2017-1438 | 6.7 | Sep 12 | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +23 more |
| CVE-2026-105466 | 6.5 | Oct 12 | IBM® Db2® is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-78404 | 6.5 | Oct 12 | IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-16702 | 6.5 | Sep 14 | IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-17463 | 6.5 | Sep 14 | IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2025-36372 | 6.5 | Jun 30 | IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2026-11906 | 6.5 | Jun 30 | IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-2669 | 6.5 | Jun 22 | Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data. Affected: 4.8 before 5.4 |
| CVE-2024-54178 | 6.5 | Jun 22 | Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data. Affected: 4.8 before 5.4 |
| CVE-2026-1577 | 6.5 | Apr 30 | IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueries Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-36122 | 6.5 | Apr 30 | IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automatic Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2026-1352 | 6.5 | Apr 22 | IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-36425 | 6.5 | Feb 17 | IBM Db2 Information Disclosure Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-13867 | 6.5 | Feb 17 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-14689 | 6.5 | Feb 17 | IBM Db2 Denial of Service Affected: 12.1.0 through 12.1.3 |
| CVE-2025-2668 | 6.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9 |