SV
Product
Security Verify Access Docker
362
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 126Medium 117Low 4
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-104332 | 5.5 | Oct 12 | IBM® Db2® Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-18097 | 5.5 | Aug 12 | IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-10695 | 5.5 | Jul 30 | IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries Affected: 12.1.0 through 12.1.4 |
| CVE-2026-7771 | 5.5 | Jul 17 | IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2026-6053 | 5.5 | May 27 | IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-13755 | 5.5 | May 26 | IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase buckets Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.4 |
| CVE-2025-36123 | 5.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36353 | 5.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36407 | 5.5 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36423 | 5.5 | Jan 30 | IBM Db2 Denial of Service Affected: 12.1.0 through 12.1.3 |
| CVE-2025-36136 | 5.5 | Nov 7 | IBM denial of service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36185 | 5.5 | Nov 7 | IBM Db2 denial of service Affected: 12.1.0 through 12.1.2 |
| CVE-2024-40679 | 5.5 | Jan 8 | IBM Db2 information disclosure Affected: 11.5 |
| CVE-2024-25030 | 5.5 | Apr 3 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log files that could be read by a local user Affected: 11.1 |
| CVE-2021-38926 | 5.5 | Dec 9 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2020-4642 | 5.5 | Dec 23 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local attacker to cause a denial of service inside the "DB2… Affected: 9.7; 10.1; 10.5; 11.1; 11.5 |
| CVE-2019-4101 | 5.5 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service Affected: 9.7.0.0; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +29 more |
| CVE-2018-1799 | 5.5 | Nov 9 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local unprivileged user to overwrite files on the system which could… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1685 | 5.5 | Sep 21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability in db2cacpy that could allow a local user to read any file on… Affected: 9.7; 10.1; 10.5; 11.1 |
| CVE-2018-1452 | 5.5 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1451 | 5.5 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1450 | 5.5 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1449 | 5.5 | May 25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1428 | 5.5 | Mar 22 | IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2018-1427 | 5.5 | Mar 22 | IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could overflow and cause a denial of service Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2017-1571 | 5.5 | Mar 22 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to… Affected: 9.7; 10.1; 10.5; 11.1; 9.7; 10.1; +2 more |
| CVE-2023-33854 | 5.3 | Jun 22 | Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data. Affected: 4.8 before 5.4 |
| CVE-2025-14688 | 5.3 | Apr 30 | IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-36428 | 5.3 | Jan 30 | IBM Db2 Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2025-1493 | 5.3 | May 5 | IBM Db2 denial of service Affected: 12.1.0 through 12.1.1 |
| CVE-2024-41761 | 5.3 | Nov 23 | IBM Db2 denial of service Affected: 10.5, 11.1, 11.5 |
| CVE-2023-52296 | 5.3 | Apr 3 | IBM Db2 for Linux, UNIX and Windows denial of service Affected: 11.5; 11.5; 11.5 |
| CVE-2020-4355 | 5.3 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service, caused by improper handling of Secure… Affected: 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0; 11.5.0.0 |
| CVE-2021-29763 | 5.1 | Sep 16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could… Affected: 11.1; 11.5 |
| CVE-2024-52894 | 4.9 | Jul 29 | IBM Db2 for Linux, UNIX and Windows denial of service Affected: 10.5.0.0 through 10.5.0.11; 11.1.0 through 11.1.4.7; 11.5.0 through 11.5.9; 12.1.0 through 12.1.2 |
| CVE-2020-4885 | 4.7 | Jun 24 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user to access and change the configuration of Db2 due to a race condition of a symbolic… Affected: 11.5 |
| CVE-2020-4387 | 4.7 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to obtain sensitive information using a race condition… Affected: 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0; 11.5.0.0 |
| CVE-2020-4386 | 4.7 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to obtain sensitive information using a race condition… Affected: 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0; 11.5.0.0 |
| CVE-2017-1434 | 4.7 | Sep 12 | IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log to a local user Affected: 11.1.0.0 |
| CVE-2025-36131 | 4.6 | Nov 7 | IBM Db2 information disclosure Affected: 11.1.0 through 11.1.4.7; 11.5.0 through 11.5.9; 12.1.0 through 12.1.3 |
| CVE-2023-38719 | 4.4 | Oct 16 | IBM Db2 denial of service Affected: 11.5.8 |
| CVE-2021-29752 | 4.4 | Sep 16 | IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions Affected: 11.2; 11.5 |
| CVE-2020-4976 | 4.4 | Mar 11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file… Affected: 11.1.0.0 before 11.1.4.6; 11.5 before 11.5.5.0; 9.7; 9.7; 9.7; 9.7; +27 more |
| CVE-2020-4414 | 4.4 | Jul 1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to perform unauthorized actions on the system,… Affected: 9.7.0.0; 10.1.0.0; 10.5.0.0; 11.1.0.0; 11.5.0.0 |
| CVE-2026-86087 | 4.3 | Sep 10 | IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2023-23487 | 4.3 | Jul 10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logging Affected: 11.1; 11.5 |
| CVE-2016-0211 | 4.3 | Apr 28 | IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via… Affected: 9.8; 9.8; 9.8; 9.8; 9.8; 9.8; +34 more |
| CVE-2017-1520 | 3.7 | Sep 12 | IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT Affected: 9.7; 9.7.0.1; 9.7.0.2; 9.7.0.3; 9.7.0.4; 9.7.0.5; +23 more |
| CVE-2026-104364 | 3.3 | Oct 12 | IBM® Db2® Denial of Service Affected: 11.5.0 through 11.5.9; 12.1.0 through 12.1.5 |
| CVE-2026-18096 | 3.3 | Aug 12 | IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak Affected: 12.1.5 |