SV
Product
Security Verify Access Docker
362
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 126Medium 117Low 4
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1150 | 3.1 | Mar 8 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not… Affected: 10.1; 10.1; 10.1; 10.1; 10.1; 10.1; +12 more |
| CVE-2015-1935 | – | Jul 20 | The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause… Affected: 9.7; 9.7; 9.7; 9.7; 9.7; 9.8; +14 more |
| CVE-2015-1922 | – | Jul 20 | The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users… Affected: 9.7; 9.7; 9.7; 9.7; 9.7; 9.8; +14 more |
| CVE-2015-1883 | – | Jul 20 | IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read certain administrative files… Affected: 9.7; 9.7; 9.7; 9.7; 9.7; 9.8; +14 more |
| CVE-2015-0157 | – | Jul 20 | IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon… Affected: 9.7; 9.7; 9.7; 9.7; 9.7; 9.8; +14 more |
| CVE-2014-8910 | – | Jul 20 | IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary text files via a… Affected: 9.7; 9.7; 9.7; 9.7; 9.7; 9.8; +14 more |
| CVE-2014-0919 | – | May 8 | IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.7; +19 more |
| CVE-2014-8901 | – | Dec 18 | IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 allows remote authenticated users to cause a denial of service (CPU consumption)… Affected: 9.5; 9.7; 9.8; 10.1; 10.5 |
| CVE-2014-6210 | – | Dec 12 | IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon… Affected: 9.7; 9.8 |
| CVE-2014-6209 | – | Dec 12 | IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial… Affected: 9.5; 9.7; 10.1; 10.5 |
| CVE-2014-6159 | – | Nov 8 | IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when immediate AUTO_REVAL is enabled, allows remote authenticated… Affected: 9.7; 9.8; 10.1; 10.5 |
| CVE-2014-6097 | – | Nov 8 | IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted ALTER TABLE… Affected: 9.7; 9.8 |
| CVE-2014-4805 | – | Sep 4 | IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information by reading a file while… Affected: 10.5; 10.5.0.1; 10.5.0.2; 10.5.0.3; 10.5.0.3 |
| CVE-2014-3095 | – | Sep 4 | The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users… Affected: 9.5; 9.5.0.1; 9.5.0.2; 9.5.0.2; 9.5.0.3; 9.5.0.3; +34 more |
| CVE-2014-3094 | – | Sep 4 | Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to… Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +19 more |
| CVE-2014-0907 | – | May 30 | Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on… Affected: 9.5; 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; +12 more |
| CVE-2013-6744 | – | May 30 | The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by… Affected: 9.5; 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; +12 more |
| CVE-2013-6717 | – | Dec 19 | The OLAP query engine in IBM DB2 and DB2 Connect 9.7 through FP9, 9.8 through FP5, 10.1 through FP3, and 10.5 through FP2, and the DB2 pureScale Feature 9.8 for Enterprise Server… Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +15 more |
| CVE-2013-5466 | – | Dec 18 | The XSLT library in IBM DB2 and DB2 Connect 9.5 through 10.5, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial… Affected: 9.5; 9.7; 9.8; 10.1; 10.5 |
| CVE-2013-4032 | – | Oct 2 | The Fast Communications Manager (FCM) in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition 10.1 before FP3 and 10.5, when a multi-node configuration is… Affected: 10.1; 10.5 |
| CVE-2013-4033 | – | Aug 28 | IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN… Affected: 9.7; 9.8; 10.1; 10.5 |
| CVE-2013-3475 | – | Jun 5 | Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600 and other products,… Affected: 9.1; 9.5; 9.7; 9.8; 10.1 |
| CVE-2012-4826 | – | Oct 20 | Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 before FP7, 9.8, and 10.1 might allow… Affected: 9.1; 9.5; 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; +5 more |
| CVE-2012-3324 | – | Sep 25 | Directory traversal vulnerability in the UTL_FILE module in IBM DB2 and DB2 Connect 10.1 before FP1 on Windows allows remote authenticated users to modify, delete, or read… Affected: All versions, or not specified |
| CVE-2012-0713 | – | Aug 24 | Unspecified vulnerability in the XML feature in IBM DB2 9.7 before FP6 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary XML files via unknown… Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5 |
| CVE-2012-2197 | – | Jul 25 | Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote… Affected: 9.1; 9.1.0.1; 9.1.0.2; 9.1.0.2; 9.1.0.3; 9.1.0.3; +34 more |
| CVE-2012-2196 | – | Jul 25 | IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the (1) GET_WRAP_CFG_C or (2)… Affected: 9.1; 9.1.0.1; 9.1.0.2; 9.1.0.2; 9.1.0.3; 9.1.0.3; +34 more |
| CVE-2012-2194 | – | Jul 25 | Directory traversal vulnerability in the SQLJ.DB2_INSTALL_JAR stored procedure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows… Affected: 9.1; 9.1.0.1; 9.1.0.2; 9.1.0.2; 9.1.0.3; 9.1.0.3; +34 more |
| CVE-2012-2180 | – | Jun 20 | The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial… Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +3 more |
| CVE-2012-1797 | – | Mar 20 | IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors Affected: 9.5 |
| CVE-2012-1796 | – | Mar 20 | Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +8 more |
| CVE-2012-0712 | – | Mar 20 | The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +18 more |
| CVE-2012-0711 | – | Mar 20 | Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows… Affected: 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +32 more |
| CVE-2012-0710 | – | Mar 20 | IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Distributed… Affected: 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +32 more |
| CVE-2012-0709 | – | Mar 20 | IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +18 more |
| CVE-2011-1373 | – | Nov 9 | Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows… Affected: through 9.7.0.4; 9.7.0.1; 9.7.0.2; 9.7.0.3 |
| CVE-2011-4061 | – | Oct 18 | Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow… Affected: 9.7 |
| CVE-2011-1846 | – | May 3 | IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly revoke role membership from groups, which allows remote authenticated users to execute… Affected: through 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +10 more |
| CVE-2011-1847 | – | May 3 | IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly enforce privilege requirements for table access, which allows remote authenticated users to… Affected: through 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +10 more |
| CVE-2011-0757 | – | Feb 2 | IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which allows remote authenticated users to… Affected: through 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +22 more |
| CVE-2011-0731 | – | Feb 1 | Buffer overflow in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers… Affected: through 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +24 more |
| CVE-2010-3740 | – | Oct 5 | The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +4 more |
| CVE-2010-3738 | – | Oct 5 | The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +4 more |
| CVE-2010-3737 | – | Oct 5 | Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (heap memory consumption) by… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +4 more |
| CVE-2010-3736 | – | Oct 5 | Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +4 more |
| CVE-2010-3735 | – | Oct 5 | The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +4 more |
| CVE-2010-3734 | – | Oct 5 | The Install component in IBM DB2 UDB 9.5 before FP6a on Linux, UNIX, and Windows enforces an unintended limit on password length, which makes it easier for attackers to obtain… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +4 more |
| CVE-2010-3733 | – | Oct 5 | The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +4 more |
| CVE-2010-3732 | – | Oct 5 | The DRDA Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (database server ABEND) by using the client CLI on Linux,… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +4 more |
| CVE-2010-3731 | – | Oct 5 | Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM… Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +4 more |