SV
Product
Security Verify Access Docker
362
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 126Medium 117Low 4
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-2582 | – | May 10 | Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to… Affected: through 9.0 |
| CVE-2007-1228 | – | Mar 2 | IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories Affected: 8.2; 8.2; 8.2; 8.2; 8.2; 8.2; +3 more |
| CVE-2007-1088 | – | Feb 23 | Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment… Affected: 8.0; 8.0; 8.0; 8.0; 8.0; 8.1; +14 more |
| CVE-2007-1087 | – | Feb 23 | IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified… Affected: 8.0; 8.0; 8.0; 8.0; 8.0; 8.1; +14 more |
| CVE-2007-1027 | – | Feb 21 | Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file Affected: 9.0; 9.0 |
| CVE-2006-4257 | – | Aug 21 | IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an… Affected: 8.0; 8.0; 8.0; 8.1; 8.1; 8.1; +34 more |
| CVE-2005-4871 | – | Dec 31 | Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via (1)… Affected: 8.1 |
| CVE-2005-4870 | – | Dec 31 | Stack-based buffer overflows in the (1) xmlvarcharfromfile, (2) xmlclobfromfile, (3) xmlfilefromvarchar, and (4) xmlfilefromclob function calls in IBM DB2 8.1 allow remote… Affected: 8.1 |
| CVE-2005-4869 | – | Dec 31 | The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application crash) via an empty string in the second parameter, which… Affected: 8.1 |
| CVE-2005-2073 | – | Jun 29 | Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2 allows local users with SELECT privileges to conduct unauthorized activities and insert, update or… Affected: 8.1.4; 8.1.5; 8.1.6; 8.1.7; 8.1.8a; 8.1.9; +3 more |
| CVE-2003-1052 | – | Sep 28 | IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs Affected: 9.0 |
| CVE-2003-1051 | – | Sep 28 | Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2)… Affected: 9.0 |