Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-4682 1Ibm 1Director Apr 16, 2026 Sep 11, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving (1) malformed WMI CIM server requests and (2) malformed packe...Show more Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving (1) malformed WMI CIM server requests and (2) malformed packets.Show less
CVE-2006-4681 1Ibm 1Director Apr 16, 2026 Sep 11, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the file parameter.
CVE-2006-4522 1Ibm 1Aix Apr 16, 2026 Sep 1, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors.
CVE-2006-4416 1Ibm 1Aix Apr 16, 2026 Aug 28, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg pro...Show more Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.Show less
CVE-2006-4257 1Ibm 1Db2 Apr 16, 2026 Aug 21, 2006 N/A· v4 N/A· v3 4.0 MEDIUM· v2 IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process,...Show more IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending crafted SQLJRA packet, which results in a null dereference.Show less
CVE-2006-4254 1Ibm 1Aix Apr 16, 2026 Aug 21, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors.
CVE-2006-4223 1Ibm 1Websphere Application Server Apr 16, 2026 Aug 18, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web...Show more IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137.Show less
CVE-2006-4222 1Ibm 1Websphere Application Server Apr 16, 2026 Aug 18, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "P...Show more Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by (2) PK22747, (3) PK24334, (4) PK25740, and (5) PK26123.Show less
CVE-2006-4221 1Ibm 1Egatherer Apr 16, 2026 Aug 18, 2006 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.
CVE-2006-3860 1Ibm 1Informix Dynamic Database Server Apr 16, 2026 Aug 17, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and...Show more IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.Show less
CVE-2006-3859 1Ibm 1Informix Dynamic Database Server Apr 16, 2026 Aug 17, 2006 N/A· v4 N/A· v3 4.0 MEDIUM· v2 IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.
CVE-2006-3854 1Ibm 1Informix Dynamic Database Server Apr 16, 2026 Aug 17, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow...Show more Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. NOTE: this issue is due to an incomplete fix for CVE-2006-3853.Show less
CVE-2006-4137 1Ibm 1Websphere Application Server Apr 16, 2026 Aug 14, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command line," and (3) traces.
CVE-2006-4136 1Ibm 1Websphere Application Server Apr 16, 2026 Aug 14, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and po...Show more Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others.Show less
CVE-2006-3862 1Ibm 1Informix Dynamic Server Apr 16, 2026 Aug 8, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable (envariable).
CVE-2006-3861 1Ibm 1Informix Dynamic Server Apr 16, 2026 Aug 8, 2006 N/A· v4 N/A· v3 4.0 MEDIUM· v2 IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases.
CVE-2006-3858 1Ibm 1Informix Dynamic Server Apr 16, 2026 Aug 8, 2006 N/A· v4 N/A· v3 2.1 LOW· v2 IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171...Show more IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).Show less
CVE-2006-3857 1Ibm 1Informix Dynamic Database Server Apr 16, 2026 Aug 8, 2006 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remvie...Show more Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179).Show less
CVE-2006-3856 1Ibm 1Informix Dynamic Server Apr 16, 2026 Aug 8, 2006 N/A· v4 N/A· v3 2.1 LOW· v2 IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors.
CVE-2006-3855 1Ibm 1Informix Dynamic Server Apr 16, 2026 Aug 8, 2006 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."

Previous 1...391392393...413 Next