SV
Product
Security Verify Access Docker
362
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 126Medium 117Low 4
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-35012 | 6.7 | Jul 17 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds… Affected: 11.5 |
| CVE-2020-4230 | 6.7 | Feb 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privilege when an authenticated local attacker with special… Affected: 11.1; 11.5 |
| CVE-2019-4057 | 6.7 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB2 instance account to leverage a fenced… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2017-1439 | 6.7 | Sep 12 | IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +23 more |
| CVE-2017-1438 | 6.7 | Sep 12 | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +23 more |
| CVE-2026-105466 | 6.5 | Oct 12 | IBM® Db2® is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-78404 | 6.5 | Oct 12 | IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-16702 | 6.5 | Sep 14 | IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-17463 | 6.5 | Sep 14 | IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2025-36372 | 6.5 | Jun 30 | IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2026-11906 | 6.5 | Jun 30 | IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-2669 | 6.5 | Jun 22 | Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data. Affected: 4.8 before 5.4 |
| CVE-2024-54178 | 6.5 | Jun 22 | Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data. Affected: 4.8 before 5.4 |
| CVE-2026-1577 | 6.5 | Apr 30 | IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueries Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-36122 | 6.5 | Apr 30 | IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automatic Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2026-1352 | 6.5 | Apr 22 | IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-36425 | 6.5 | Feb 17 | IBM Db2 Information Disclosure Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-13867 | 6.5 | Feb 17 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-14689 | 6.5 | Feb 17 | IBM Db2 Denial of Service Affected: 12.1.0 through 12.1.3 |
| CVE-2025-2668 | 6.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9 |
| CVE-2025-36001 | 6.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36009 | 6.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36098 | 6.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36366 | 6.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36387 | 6.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9 |
| CVE-2025-36424 | 6.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36427 | 6.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36006 | 6.5 | Nov 7 | IBM Db2 denial of service Affected: 10.5.0 through 10.5.11; 11.1.0 through 11.1.4.7; 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36008 | 6.5 | Nov 7 | IBM Db2 denial of service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-3050 | 6.5 | May 29 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service… Affected: 11.5 through 11.5.9; 11.5 through 11.5.9; 11.5 through 11.5.9; 12.1.0 through 12.1.1; 12.1.0 through 12.1.1; 12.1.0 through 12.1.1 |
| CVE-2025-1000 | 6.5 | May 5 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service… Affected: 11.5 through 11.5.9; 11.5 through 11.5.9; 11.5 through 11.5.9; 12.1.0 through 12.1.1; 12.1.0 through 12.1.1; 12.1.0 through 12.1.1 |
| CVE-2025-0915 | 6.5 | May 5 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 under specific configurations could allow an authenticated… Affected: 11.5 through 11.5.9; 11.5 through 11.5.9; 11.5 through 11.5.9; 12.1.0 through 12.1.1; 12.1.0 through 12.1.1; 12.1.0 through 12.1.1 |
| CVE-2025-1992 | 6.5 | May 5 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user in federation environment, to… Affected: 11.5.0 through 11.5.9; 12.1.0; 12.1.1 |
| CVE-2023-30443 | 6.5 | Dec 19 | IBM Db2 denial of service Affected: 10.5, 11.1 ,11.5 |
| CVE-2024-41762 | 6.5 | Dec 7 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash under certain conditions with a… Affected: 10.5.0 through 10.5.11; 11.1.4 through 11.1.4.7; 11.5.0 through 11.5.9 |
| CVE-2024-37071 | 6.5 | Dec 7 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user to cause a denial of service with a specially crafted… Affected: 10.5.0 through 10.5.11; 11.1.4 through 11.1.4.7; 11.5.0 through 11.5.9 |
| CVE-2024-31880 | 6.5 | Oct 23 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash… Affected: 10.5.0.0 through 10.5.11; 11.1.4 through 11.1.4.7; 11.5 through 11.5.9 |
| CVE-2024-37529 | 6.5 | Aug 14 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 could allow an authenticated user to cause a denial of service with a specially crafted query due… Affected: 11.1.4 through 11.1.4.7; 11.1.4 through 11.1.4.7; 11.1.4 through 11.1.4.7; 11.1.4 through 11.1.4.7; 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; +2 more |
| CVE-2024-35152 | 6.5 | Aug 14 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to cause a denial of service with a specially crafted query due to… Affected: 11.5.8; 11.5.8; 11.5.8; 11.5.9; 11.5.9; 11.5.9 |
| CVE-2024-35136 | 6.5 | Aug 14 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) federated server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under… Affected: 10.5.0 through 10.5.11; 10.5.0 through 10.5.11; 10.5.0 through 10.5.11; 10.5.0 through 10.5.11; 10.5.0 through 10.5.11; 11.1.4 through 11.1.4.7; +9 more |
| CVE-2024-31882 | 6.5 | Aug 14 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service, under specific non default configurations, as the server may… Affected: 11.1.4 through 11.1.4.7; 11.1.4 through 11.1.4.7; 11.1.4 through 11.1.4.7; 11.5.0 through 11.5.9; 11.5.0 through 11.5.9; 11.5.0 through 11.5.9 |
| CVE-2024-31881 | 6.5 | Jun 12 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted… Affected: 10.5; 10.5; 10.5; 11.1; 11.1; 11.1; +3 more |
| CVE-2023-29267 | 6.5 | Jun 12 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5is vulnerable to a denial of service, under specific configurations, as the server may crash… Affected: 10.5; 10.5; 10.5; 11.1; 11.1; 11.1; +3 more |
| CVE-2024-28762 | 6.5 | Jun 12 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under certain conditions Affected: 10.5; 10.5; 10.5; 11.1; 11.1; 11.1; +3 more |
| CVE-2024-27254 | 6.5 | Apr 3 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated server is vulnerable to denial of service with a specially crafted query under… Affected: 10.5; 10.5; 10.5; 11.1; 11.1; 11.1; +3 more |
| CVE-2024-25046 | 6.5 | Apr 3 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service by an authenticated user using a specially crafted query Affected: 11.1; 11.1; 11.1; 11.5; 11.5; 11.5 |
| CVE-2024-22360 | 6.5 | Apr 3 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted query on certain columnar tables Affected: 11.5; 11.5; 11.5 |
| CVE-2023-38729 | 6.5 | Apr 3 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to sensitive information disclosure when using ADMIN_CMD with IMPORT or EXPORT Affected: 10.5; 10.5; 10.5; 11.1; 11.1; 11.1; +3 more |
| CVE-2023-47141 | 6.5 | Jan 22 | IIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially… Affected: before 11.5.9 |
| CVE-2023-47747 | 6.5 | Jan 22 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using… Affected: 10.5.0.0 through 10.5.0.11; 11.1.0.0 through 11.1.4.7; 11.5 through 11.5.9 |