← Back

Ibm

ibm

8,704 CVEs • 1,613 products

Products (1,613)

Click to collapse
Toggle
Aix
aix
Db2
db2
Vios
vios
I
i
Websphere Mq
websphere_mq
Lotus Domino
lotus_domino
Api Connect
api_connect
Lotus Notes
lotus_notes
Concert
concert
Aspera Faspex
aspera_faspex
Mq Appliance
mq_appliance
Mq
mq
Sametime
sametime
Cics Tx
cics_tx
Connections
connections
Java
java
Domino
domino

CVEs (8,704)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ibm
1Websphere Application Server
Apr 23, 2026
Sep 12, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6.1.0.11) has unknown impact and attack vectors, aka PK33803.
1Ibm
1Websphere Application Server
Apr 23, 2026
Sep 12, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6.1.0.11) has unknown impact and attack vectors, aka PK44789.
1Ibm
1Aix
Apr 23, 2026
Sep 10, 2007
N/A· v4
N/A· v3
4.9 MEDIUM· v2
The perfstat kernel extension in bos.perf.perfstat in AIX 5.3 does not verify privileges when processing a SET call, which allows local users to cause a denial of service (system hang or crash) via unspecified SET operat...Show more
The perfstat kernel extension in bos.perf.perfstat in AIX 5.3 does not verify privileges when processing a SET call, which allows local users to cause a denial of service (system hang or crash) via unspecified SET operations.Show less
1Ibm
1Aix
Apr 23, 2026
Sep 10, 2007
N/A· v4
N/A· v3
6.6 MEDIUM· v2
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated...Show more
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix".Show less
1Ibm
1Aix
Apr 23, 2026
Sep 10, 2007
N/A· v4
N/A· v3
7.2 HIGH· v2
Multiple buffer overflows in unspecified svprint (System V print) commands in bos.svprint.rte in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors.
1Ibm
1Aix
Apr 23, 2026
Sep 10, 2007
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in uucp in bos.net.uucp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors.
1Ibm
1Aix
Apr 23, 2026
Sep 10, 2007
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in mkpath in bos.rte.methods in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long ODM name.
1Ibm
1Aix
Apr 23, 2026
Sep 10, 2007
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in fcstat in devices.common.IBM.fc.rte in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long input parameter.
1Ibm
1Aix
Apr 23, 2026
Sep 10, 2007
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in xlplm in plm.server.rte in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors.
1Ibm
1Aix
Apr 23, 2026
Sep 10, 2007
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in ibstat in devices.common.IBM.ib.rte in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors.
1Ibm
1Aix
Apr 23, 2026
Sep 10, 2007
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in the swcons command in bos.rte.console in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2005-3504 and CVE-2007-0978.
1Ibm
1Surepos 500
Apr 23, 2026
Aug 30, 2007
N/A· v4
N/A· v3
4.6 MEDIUM· v2
IBM SurePOS 500 has (1) a default password of "12345" for the manager and (2) blank default passwords for operator accounts.
1Ibm
1Db2 Universal Database
Apr 23, 2026
Aug 18, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Stack-based buffer overflow in the AUTH_LIST_GROUPS_FOR_AUTHID function in IBM DB2 UDB 9.1 before Fixpak 3 allows attackers to cause a denial of service and possibly execute arbitrary code via a long argument.
1Ibm
1Db2 Universal Database
Apr 23, 2026
Aug 18, 2007
N/A· v4
N/A· v3
5.5 MEDIUM· v2
IBM DB2 UDB 8 before Fixpak 15 does not properly check authorization, which allows remote authenticated users with a certain SELECT privilege to have an unknown impact via unspecified vectors. NOTE: this issue is probab...Show more
IBM DB2 UDB 8 before Fixpak 15 does not properly check authorization, which allows remote authenticated users with a certain SELECT privilege to have an unknown impact via unspecified vectors. NOTE: this issue is probably related to CVE-2007-1089, but this is uncertain due to lack of details.Show less
1Ibm
1Db2 Universal Database
Apr 23, 2026
Aug 18, 2007
N/A· v4
N/A· v3
6.0 MEDIUM· v2
IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed.
1Ibm
1Db2 Universal Database
Apr 23, 2026
Aug 18, 2007
N/A· v4
N/A· v3
6.9 MEDIUM· v2
Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows attackers to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buil...Show more
Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows attackers to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buildDasPaths buffer.Show less
1Ibm
1Db2 Universal Database
Apr 23, 2026
Aug 18, 2007
N/A· v4
N/A· v3
6.9 MEDIUM· v2
Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain privileges via certain vectors related to (1) DB2 instance or FMP startup on Linux and So...Show more
Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain privileges via certain vectors related to (1) DB2 instance or FMP startup on Linux and Solaris; (2) exec of executables while running as root on non-Windows systems, as demonstrated by AIX; and unspecified vectors involving (3) db2licm and (4) db2pd.Show less
1Ibm
1Db2 Universal Database
Apr 23, 2026
Aug 18, 2007
N/A· v4
N/A· v3
4.6 MEDIUM· v2
IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized message file" that enables a format string attack, possibly in...Show more
IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized message file" that enables a format string attack, possibly involving the (1) OSSEMEMDBG or (2) TRC_LOG_FILE environment variable in db2licd (db2licm).Show less
1Ibm
1Db2 Universal Database
Apr 23, 2026
Aug 18, 2007
N/A· v4
N/A· v3
1.9 LOW· v2
Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via (1) unspecified vectors where an attacker's umask is honored, (2) /etc/ld.so.preload, (3)...Show more
Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via (1) unspecified vectors where an attacker's umask is honored, (2) /etc/ld.so.preload, (3) certain "cron data file locations", and other unspecified vectors possibly involving the (4) OSSEMEMDBG or (5) TRC_LOG_FILE environment variable in db2licd (db2licm).Show less
1Ibm
1Db2 Universal Database
Apr 23, 2026
Aug 18, 2007
N/A· v4
N/A· v3
2.1 LOW· v2
Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. (dot dot) in an unspecified environment variable, which is appended to "/t...Show more
Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. (dot dot) in an unspecified environment variable, which is appended to "/tmp/" and used as a log file. NOTE: this issue might be related to symlink following.Show less