← Back

Ibm

ibm

9,039 CVEs • 1,615 products

Products (1,615)

Click to collapse
Toggle
Aix
aix
Db2
db2
Vios
vios
I
i
Websphere Mq
websphere_mq
Lotus Domino
lotus_domino
Api Connect
api_connect
Concert
concert
Lotus Notes
lotus_notes
Mq
mq
Aspera Faspex
aspera_faspex
Mq Appliance
mq_appliance
Sametime
sametime
Cics Tx
cics_tx
Connections
connections

CVEs (9,039)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ibm
1Aix
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.
5Apache
AvayaGentoo+2 more
8Converged Communications Server
Http ServerHttp Server+5 more
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
6.4 MEDIUM· v2
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 6...Show more
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.Show less
5Apache
HpIbm+2 more
7Http Server
Http ServerOpenbsd+4 more
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length H...Show more
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.Show less
3Ibm
Open GroupXi Graphics
3Aix
Cde Common Desktop EnvironmentDextop
Apr 16, 2026
May 4, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.
1Ibm
1Aix
Apr 16, 2026
Apr 15, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges.
1Ibm
1Aix
Apr 16, 2026
Mar 29, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.
1Ibm
1Aix
Apr 16, 2026
Mar 29, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors.
8Apache
AppleAvaya+5 more
14Apache Mod Digest Apple
Communication ManagerHttp Server+11 more
Apr 16, 2026
Feb 3, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
1Ibm
1Aix
Apr 16, 2026
Feb 3, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities.
1Ibm
2Informix Dynamic Server
Informix Extended Parallel Server
Apr 16, 2026
Jan 27, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.
2Cisco
Ibm
17Call Manager
Conference ConnectionDirector Agent+14 more
Apr 16, 2026
Jan 21, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by...Show more
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.Show less
2Cisco
Ibm
17Call Manager
Conference ConnectionDirector Agent+14 more
Apr 16, 2026
Jan 21, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated...Show more
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.Show less
1Ibm
1Lotus Domino
Apr 16, 2026
Jan 20, 2004
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges.
1Ibm
1Aix
Apr 16, 2026
Jan 20, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion).
2Ibm
Iss
2Blackice Server Protection
Internet Security Systems Blackice Defender
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
4.3 MEDIUM· v2
BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
1Ibm
1Websphere Application Server
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
1.9 LOW· v2
IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.
1Ibm
1Tivoli Firewall Toolbox
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown vectors.
1Ibm
1Aix
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.
9Compaq
FreebsdHp+6 more
10Aix
BindFreebsd+7 more
Apr 16, 2026
Dec 15, 2003
N/A· v4
N/A· v3
4.3 MEDIUM· v2
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
1Ibm
1Db2 Universal Database
Apr 16, 2026
Nov 17, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.