← Back

Ibm

ibm

8,250 CVEs • 1,572 products

Products (1,572)

Click to collapse
Toggle
Aix
aix
Db2
db2
Vios
vios
Websphere Mq
websphere_mq
Lotus Domino
lotus_domino
Api Connect
api_connect
Lotus Notes
lotus_notes
Concert
concert
I
i
Mq Appliance
mq_appliance
Mq
mq
Sametime
sametime
Aspera Faspex
aspera_faspex
Cics Tx
cics_tx
Connections
connections
Java
java
Domino
domino
Doors Next
doors_next

CVEs (8,250)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ibm
2Informix Dynamic Server
Informix Extended Parallel Server
Apr 16, 2026
Jan 27, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.
2Cisco
Ibm
17Call Manager
Conference ConnectionDirector Agent+14 more
Apr 16, 2026
Jan 21, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by...Show more
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.Show less
2Cisco
Ibm
17Call Manager
Conference ConnectionDirector Agent+14 more
Apr 16, 2026
Jan 21, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated...Show more
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.Show less
1Ibm
1Lotus Domino
Apr 16, 2026
Jan 20, 2004
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges.
1Ibm
1Aix
Apr 16, 2026
Jan 20, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion).
2Ibm
Iss
2Blackice Server Protection
Internet Security Systems Blackice Defender
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
4.3 MEDIUM· v2
BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
1Ibm
1Websphere Application Server
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
1.9 LOW· v2
IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.
1Ibm
1Tivoli Firewall Toolbox
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown vectors.
1Ibm
1Aix
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.
9Compaq
FreebsdHp+6 more
10Aix
BindFreebsd+7 more
Apr 16, 2026
Dec 15, 2003
N/A· v4
N/A· v3
4.3 MEDIUM· v2
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
1Ibm
1Db2 Universal Database
Apr 16, 2026
Nov 17, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.
1Ibm
1Db2 Universal Database
Apr 16, 2026
Nov 17, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command.
1Ibm
1Db2 Universal Database
Apr 16, 2026
Nov 17, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command.
1Ibm
1Db2 Universal Database
Apr 16, 2026
Oct 6, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523.
1Ibm
1Aix
Apr 16, 2026
Oct 6, 2003
N/A· v4
N/A· v3
10.0 HIGH· v2
Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that...Show more
Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers.Show less
1Ibm
1Db2 Universal Database
Apr 16, 2026
Oct 6, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument.
1Ibm
1Db2 Universal Database
Apr 16, 2026
Oct 6, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command line argument.
1Ibm
1Aix
Apr 16, 2026
Oct 6, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service (crash) or gain root privileges.
11Apple
CompaqFreebsd+8 more
18Advanced Message Server
AixFreebsd+15 more
Apr 16, 2026
Oct 6, 2003
N/A· v4
N/A· v3
10.0 HIGH· v2
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
8Apple
GentooHp+5 more
14Advanced Message Server
AixHp Ux+11 more
Apr 16, 2026
Oct 6, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.