SV
Product
Security Verify Access Docker
362
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 126Medium 117Low 4
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10534 | 9.8 | Aug 12 | IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-10543 | 9.8 | Aug 12 | IBM® Db2® is vulnerable to privilege escalation with a specially crafted query Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-10109 | 9.8 | Jun 30 | IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2018-1426 | 9.1 | Mar 22 | IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2026-105464 | 8.8 | Oct 12 | IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-105465 | 8.8 | Oct 12 | IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2025-33012 | 8.8 | Nov 7 | IBM Db2 improper account lockout Affected: 10.5.0 through 10.5.11; 11.1.0 through 11.1.4.7; 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2023-42005 | 8.8 | May 29 | IBM Db2 on Cloud Pak for Data privilege escalation Affected: 3.5, 4.0, 4.5, 4.6, 4.7, 4.8 |
| CVE-2023-27868 | 8.8 | Jul 8 | IBM Db2 code execution Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-27867 | 8.8 | Jul 8 | IBM Db2 code execution Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-27869 | 8.8 | Jul 8 | IBM Db2 code execution Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2022-41296 | 8.8 | Dec 1 | IBM Db2U cross-site respect forgery Affected: 3.5; 3.5; 4.0; 4.0; 4.5; 4.5 |
| CVE-2021-29678 | 8.7 | Dec 9 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2025-36247 | 8.2 | Feb 17 | IBM Db2 XML External Entity Reference Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2026-87958 | 8.1 | Sep 10 | IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2020-4945 | 8.1 | Jun 24 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite arbirary files due to improper group permissions Affected: 11.5 |
| CVE-2026-10535 | 7.8 | Jul 30 | IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2026-9762 | 7.8 | Jul 17 | IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-36384 | 7.8 | Jan 30 | IBM Db2 Privilege Escalation Affected: 12.1.0 through 12.1.3 |
| CVE-2025-36186 | 7.8 | Nov 7 | IBM Db2 privilege escalation Affected: 12.1.0 through 12.1.3 |
| CVE-2025-33092 | 7.8 | Jul 29 | IBM Db2 for Linux code execution Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.2 |
| CVE-2024-35141 | 7.8 | Dec 19 | IBM Security Verify Access privilege escalation Affected: 10.0.0 through 10.0.6 |
| CVE-2023-47145 | 7.8 | Jan 7 | IBM Db2 for Windows privilege escalation Affected: 10.5, 11.1, 11.5 |
| CVE-2023-30431 | 7.8 | Jul 9 | IBM Db2 buffer overflow Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2023-27558 | 7.8 | Jul 9 | IBM Db2 privilege escalation Affected: 10.5.0.11; 11.1.4.7; 11.5 |
| CVE-2019-4588 | 7.8 | May 26 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2020-5025 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking… Affected: 11.1.0.0 before 11.1.4.6; 11.5 before 11.5.5.0; 9.7; 9.7; 9.7; 9.7; +27 more |
| CVE-2020-4739 | 7.8 | Nov 20 | IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local… Affected: 11.5 before 11.5.5.0; 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0 |
| CVE-2020-4701 | 7.8 | Nov 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a… Affected: 10.5; 11.1; 11.5 |
| CVE-2020-4363 | 7.8 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which… Affected: 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0; 11.5.0.0 |
| CVE-2020-4204 | 7.8 | Feb 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2019-4322 | 7.8 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2019-4154 | 7.8 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2019-4014 | 7.8 | Apr 3 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2018-1936 | 7.8 | Apr 3 | IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute… Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2019-4094 | 7.8 | Mar 19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1922 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1923 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1978 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1980 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2019-4015 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2019-4016 | 7.8 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1897 | 7.8 | Nov 30 | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1834 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to escalate their privileges to… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1802 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1781 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access by exploiting a symbolic link attack to… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1780 | 7.8 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 instance owner to obtain root access by exploiting a symbolic… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1711 | 7.8 | Sep 21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges due to allowing modification of columns… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1710 | 7.8 | Sep 21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerability that can potentially result in… Affected: 10.1; 10.5; 11.1 |
| CVE-2018-1566 | 7.8 | Jul 10 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to execute arbitrary code due to a format string error Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |