SV
Product
Security Verify Access Docker
362
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 126Medium 117Low 4
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105464 | 8.8 | Oct 12 | IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-105465 | 8.8 | Oct 12 | IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2025-33012 | 8.8 | Nov 7 | IBM Db2 improper account lockout Affected: 10.5.0 through 10.5.11; 11.1.0 through 11.1.4.7; 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2023-42005 | 8.8 | May 29 | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls… Affected: 3.5; 3.5; 4.0; 4.0; 4.5; 4.5; +6 more |
| CVE-2023-27869 | 8.8 | Jul 10 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an… Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-27868 | 8.8 | Jul 10 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an… Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-27867 | 8.8 | Jul 10 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Injection Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2022-41296 | 8.8 | Dec 12 | IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the… Affected: 3.5; 3.5; 4.0; 4.0; 4.5; 4.5 |
| CVE-2021-29678 | 8.7 | Dec 9 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2025-36247 | 8.2 | Feb 17 | IBM Db2 XML External Entity Reference Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2026-87958 | 8.1 | Sep 10 | IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2020-4945 | 8.1 | Jun 24 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite arbirary files due to improper group permissions Affected: 11.5 |
| CVE-2026-10535 | 7.8 | Jul 30 | IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2026-9762 | 7.8 | Jul 17 | IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-36384 | 7.8 | Jan 30 | IBM Db2 Privilege Escalation Affected: 12.1.0 through 12.1.3 |
| CVE-2025-36186 | 7.8 | Nov 7 | IBM Db2 privilege escalation Affected: 12.1.0 through 12.1.3 |
| CVE-2025-33092 | 7.8 | Jul 29 | IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking Affected: 12.1.0; 12.1.1; 12.1.2 |
| CVE-2024-35141 | 7.8 | Dec 19 | IBM Security Verify Access privilege escalation Affected: 10.0.0 through 10.0.6 |
| CVE-2023-47145 | 7.8 | Jan 7 | IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality Affected: 10.5 before 10.5.0.11; 11.1 before 11.1.4.7; 11.5 before 11.5.8 |
| CVE-2023-30431 | 7.8 | Jul 10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-27558 | 7.8 | Jul 10 | IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2019-4588 | 7.8 | May 26 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2020-5025 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking… Affected: 11.1.0.0 before 11.1.4.6; 11.5 before 11.5.5.0; 9.7; 9.7; 9.7; 9.7; +27 more |
| CVE-2020-4739 | 7.8 | Nov 20 | IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local… Affected: 11.5 before 11.5.5.0; 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0 |
| CVE-2020-4701 | 7.8 | Nov 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a… Affected: 10.5; 11.1; 11.5 |
| CVE-2020-4363 | 7.8 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which… Affected: 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0; 11.5.0.0 |
| CVE-2020-4204 | 7.8 | Feb 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2019-4322 | 7.8 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2019-4154 | 7.8 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2019-4014 | 7.8 | Apr 3 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2018-1936 | 7.8 | Apr 3 | IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2019-4094 | 7.8 | Mar 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1923 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1922 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2019-4016 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2019-4015 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1980 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1978 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1897 | 7.8 | Nov 30 | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1834 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to escalate their privileges to… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1802 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1781 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access by exploiting a symbolic link attack to… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1780 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 instance owner to obtain root access by exploiting a symbolic… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1711 | 7.8 | Sep 21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges due to allowing modification of columns… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1710 | 7.8 | Sep 21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerability that can potentially result in… Affected: 10.1; 10.5; 11.1 |
| CVE-2018-1566 | 7.8 | Jul 10 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to execute arbitrary code due to a format string error Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1487 | 7.8 | Jul 10 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1458 | 7.8 | Jul 10 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1565 | 7.8 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1544 | 7.8 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |