Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm db2 9.1 vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2009-4332
db2pd in the Problem Determination component in IBM DB2 9.1 before FP7 and 9.5 before FP5 allows malicious users to cause a denial of service (NULL pointer dereference and application termination) via unspecified vectors.
Ibm Db2 9.5
Ibm Db2 9.1
Ibm Db2 9.7
5
CVSSv2
CVE-2009-1239
IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow malicious users to obtain sensitive information via a crafted query.
Ibm Db2 9.1
Ibm Db2
5
CVSSv2
CVE-2009-0172
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote malicious users to cause a denial of service (infinite loop) via a crafted CONNECT data stream.
Ibm Db2 Universal Database 9.1
Ibm Db2 Universal Database 9.5
1 EDB exploit
5
CVSSv2
CVE-2009-0173
Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users to cause a denial of service (trap) via a crafted data stream.
Ibm Db2 Universal Database 9.1
Ibm Db2 Universal Database 9.5
5
CVSSv2
CVE-2008-4691
Unspecified vulnerability in the SQLNLS_UNPADDEDCHARLEN function in the New Compiler (aka Starburst derived compiler) component in the server in IBM DB2 9.1 before FP6 allows malicious users to cause a denial of service (segmentation violation and trap) via unknown vectors.
Ibm Db2 9.1
Ibm Db2
5
CVSSv2
CVE-2008-4693
The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows malicious users to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."
Ibm Db2 9.1
Ibm Db2
Ibm Db2 9.5
5
CVSSv2
CVE-2008-3959
IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote malicious users to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.
Ibm Db2 8.1
Ibm Db2 8.2
Ibm Db2
5
CVSSv2
CVE-2007-4423
Stack-based buffer overflow in the AUTH_LIST_GROUPS_FOR_AUTHID function in IBM DB2 UDB 9.1 before Fixpak 3 allows malicious users to cause a denial of service and possibly execute arbitrary code via a long argument.
Ibm Db2 Universal Database 8.0
Ibm Db2 Universal Database 9.0
Ibm Db2 Universal Database 9.1
4.6
CVSSv2
CVE-2009-4334
The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file.
Ibm Db2 9.5
Ibm Db2 9.7
Ibm Db2 9.1
4.6
CVSSv2
CVE-2009-4150
dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.
Ibm Db2 Universal Database 8
Ibm Db2 9.1
Ibm Db2 9.5
Ibm Db2 9.7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946
CVE-2024-30309
CVE-2024-4761
CVE-2024-30051
type confusion
memory leak
CVE-2024-30293
reflected XSS
CVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »