Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-4335 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in bundled stored procedures in the Spatial Extender component in IBM DB2 9.5 before FP5 have unknown impact and remote attack vectors, related to "remote exploits."
CVE-2009-4334 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have uns...Show more The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file.Show less
CVE-2009-4333 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command.
CVE-2009-4332 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 db2pd in the Problem Determination component in IBM DB2 9.1 before FP7 and 9.5 before FP5 allows attackers to cause a denial of service (NULL pointer dereference and application termination) via unspecified vectors.
CVE-2009-4331 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 7.2 HIGH· v2 The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vector...Show more The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors.Show less
CVE-2009-4330 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors.
CVE-2009-4329 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the Engine Utilities component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (segmentation fault) by modifying the db2ra data stream sent in a reque...Show more Unspecified vulnerability in the Engine Utilities component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (segmentation fault) by modifying the db2ra data stream sent in a request from the Load Utility.Show less
CVE-2009-4328 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the DRDA Services component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (server trap) by calling a SQL stored procedure in unknown circumstances.
CVE-2009-4327 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service (m...Show more The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service (memory consumption) via unspecified vectors.Show less
CVE-2009-4326 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature (DPF) is used, produces "repeating" return values, which might all...Show more The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature (DPF) is used, produces "repeating" return values, which might allow attackers to defeat protection mechanisms based on randomization by predicting a value.Show less
CVE-2009-4325 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown v...Show more The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."Show less
CVE-2009-4240 1Ibm 1Infosphere Information Server Apr 23, 2026 Dec 9, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors.
CVE-2009-4239 1Ibm 1Infosphere Information Server Apr 23, 2026 Dec 9, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2009-2749 1Ibm 2Communications Enabled Applications Websphere Application Server Apr 23, 2026 Dec 8, 2009 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration se...Show more Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value.Show less
CVE-2009-4153 1Ibm 1Websphere Portal Apr 23, 2026 Dec 2, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x before 6.1.0.3 has unknown impact and attack vectors, related to the work directory.
CVE-2009-4152 1Ibm 1Websphere Portal Apr 23, 2026 Dec 2, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag.
CVE-2009-4150 1Ibm 2Db2 Db2 Universal Database Apr 23, 2026 Dec 2, 2009 N/A· v4 N/A· v3 4.6 MEDIUM· v2 dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.
CVE-2009-4052 1Ibm 2Rational Application Developer For Websphere Rational Software Architect Apr 23, 2026 Nov 23, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow rem...Show more Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) the JSF Tree Control and (2) the JavaScript Resource Servlet.Show less
CVE-2009-2746 1Ibm 1Websphere Application Server Apr 23, 2026 Nov 16, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows...Show more Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the authentication of administrators via unspecified vectors.Show less
CVE-2009-3935 1Ibm 1Advanced Management Module Firmware Apr 23, 2026 Nov 12, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors.

Previous 1...367368369...413 Next