Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-4329 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the Engine Utilities component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (segmentation fault) by modifying the db2ra data stream sent in a reque...Show more Unspecified vulnerability in the Engine Utilities component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (segmentation fault) by modifying the db2ra data stream sent in a request from the Load Utility.Show less
CVE-2009-4328 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the DRDA Services component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (server trap) by calling a SQL stored procedure in unknown circumstances.
CVE-2009-4327 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service (m...Show more The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service (memory consumption) via unspecified vectors.Show less
CVE-2009-4326 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature (DPF) is used, produces "repeating" return values, which might all...Show more The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature (DPF) is used, produces "repeating" return values, which might allow attackers to defeat protection mechanisms based on randomization by predicting a value.Show less
CVE-2009-4325 1Ibm 1Db2 Apr 23, 2026 Dec 16, 2009 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown v...Show more The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."Show less
CVE-2009-4240 1Ibm 1Infosphere Information Server Apr 23, 2026 Dec 9, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors.
CVE-2009-4239 1Ibm 1Infosphere Information Server Apr 23, 2026 Dec 9, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2009-2749 1Ibm 2Communications Enabled Applications Websphere Application Server Apr 23, 2026 Dec 8, 2009 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration se...Show more Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value.Show less
CVE-2009-4153 1Ibm 1Websphere Portal Apr 23, 2026 Dec 2, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x before 6.1.0.3 has unknown impact and attack vectors, related to the work directory.
CVE-2009-4152 1Ibm 1Websphere Portal Apr 23, 2026 Dec 2, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag.
CVE-2009-4150 1Ibm 2Db2 Db2 Universal Database Apr 23, 2026 Dec 2, 2009 N/A· v4 N/A· v3 4.6 MEDIUM· v2 dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.
CVE-2009-4052 1Ibm 2Rational Application Developer For Websphere Rational Software Architect Apr 23, 2026 Nov 23, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow rem...Show more Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) the JSF Tree Control and (2) the JavaScript Resource Servlet.Show less
CVE-2009-2746 1Ibm 1Websphere Application Server Apr 23, 2026 Nov 16, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows...Show more Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the authentication of administrators via unspecified vectors.Show less
CVE-2009-3935 1Ibm 1Advanced Management Module Firmware Apr 23, 2026 Nov 12, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors.
CVE-2009-3900 1Ibm 1Powerha Apr 23, 2026 Nov 6, 2009 N/A· v4 N/A· v3 7.8 HIGH· v2 Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port (6177/tcp).
CVE-2009-3855 1Ibm 1Tivoli Storage Manager Apr 23, 2026 Nov 4, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.6, 5.4 before 5.4.2, and 5.5 before 5.5.1, wh...Show more Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.6, 5.4 before 5.4.2, and 5.5 before 5.5.1, when the MAILPROG option is enabled, allow attackers to read, modify, or delete arbitrary files via unknown vectors.Show less
CVE-2009-3854 1Ibm 1Tivoli Storage Manager Apr 23, 2026 Nov 4, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2009-3853 1Ibm 1Tivoli Storage Manager Apr 23, 2026 Nov 4, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Expres...Show more Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to execute arbitrary code via crafted data in a TCP packet.Show less
CVE-2009-0306 2Ibm Rim 2Blackberry Desktop Software Lotus Notes Intellisync Apr 23, 2026 Nov 4, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (RIM) BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute...Show more Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (RIM) BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-3852 1Ibm 1Runtimes For Java Technology Apr 23, 2026 Nov 3, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."

Previous 1...390391392...436 Next