← Back

Ibm

ibm

9,039 CVEs • 1,615 products

Products (1,615)

Click to collapse
Toggle
Aix
aix
Db2
db2
Vios
vios
I
i
Websphere Mq
websphere_mq
Lotus Domino
lotus_domino
Api Connect
api_connect
Concert
concert
Lotus Notes
lotus_notes
Mq
mq
Aspera Faspex
aspera_faspex
Mq Appliance
mq_appliance
Sametime
sametime
Cics Tx
cics_tx
Connections
connections

CVEs (9,039)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ibm
1Aix
Apr 16, 2026
Oct 28, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory...Show more
IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.Show less
1Ibm
1Websphere Application Server
Apr 16, 2026
Oct 11, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host".
5Allume Systems Division
IbmMicrosoft+2 more
7Keyview Viewing Sdk
Lotus NotesStuffit Expander+4 more
Apr 16, 2026
Oct 10, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Win...Show more
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.Show less
1Ibm
1Aix
Apr 16, 2026
Oct 4, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames.
1Ibm
1Aix
Apr 16, 2026
Oct 4, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames.
1Ibm
1Tivoli Management Framework
Apr 16, 2026
Oct 4, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
1Ibm
1Tivoli Management Framework
Apr 16, 2026
Oct 4, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET reque...Show more
Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.Show less
1Ibm
1Informix
Apr 16, 2026
Oct 4, 2002
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.
6Caldera
CompaqHp+3 more
8Aix
DextopHp Ux+5 more
Apr 16, 2026
Sep 5, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
1Ibm
1Aix
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges.
1Ibm
1Aix
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in lsmcode in AIX 4.3.3.
1Ibm
1Aix
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.
1Ibm
1Aix
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in uucp in AIX 4.3.3.
1Ibm
1Aix
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow.
1Ibm
1Aix
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.
1Ibm
1Aix
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in pioout on AIX 4.3.3.
1Ibm
1U2 Universe
Apr 16, 2026
Jul 31, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server CPU consumption) via a query with an invalid link between tables, possibly via a buffer overflow.
7Caldera
CompaqHp+4 more
9Aix
DextopHp Ux+6 more
Apr 16, 2026
Jul 23, 2002
N/A· v4
N/A· v3
7.2 HIGH· v2
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
7Caldera
CompaqHp+4 more
9Aix
DextopHp Ux+6 more
Apr 16, 2026
Jul 23, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is...Show more
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.Show less
1Ibm
1Informix Web Datablade
Apr 16, 2026
Jul 3, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.