Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Total 7423 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-4864 1 Ibm 1 Db2 Universal Database 2025-04-03 7.2 HIGH N/A
Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable.
CVE-2001-0671 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.
CVE-2003-1018 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.
CVE-2003-0580 1 Ibm 1 U2 Universe 2025-04-03 7.2 HIGH N/A
Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.
CVE-2001-1061 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
CVE-2003-0836 1 Ibm 1 Db2 Universal Database 2025-04-03 7.5 HIGH N/A
Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command.
CVE-2005-3504 1 Ibm 1 Aix 2025-04-03 7.5 HIGH N/A
Buffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers to cause a core dump and possibly execute arbitrary code.
CVE-2004-0243 1 Ibm 1 Aix 2025-04-03 5.0 MEDIUM N/A
AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods.
CVE-2001-1189 1 Ibm 1 Websphere Application Server 2025-04-03 4.6 MEDIUM N/A
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.
CVE-2001-0446 1 Ibm 1 Websphere Commerce Suite 2025-04-03 5.0 MEDIUM N/A
IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to the requested URL.
CVE-2005-2238 1 Ibm 1 Aix 2025-04-03 2.1 LOW N/A
ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by using all ephemeral ports.
CVE-1999-1079 1 Ibm 1 Aix 2025-04-03 4.6 MEDIUM N/A
Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
CVE-2005-4869 1 Ibm 1 Db2 2025-04-03 2.1 LOW N/A
The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application crash) via an empty string in the second parameter, which causes a null pointer dereference.
CVE-1999-0694 1 Ibm 1 Aix 2025-04-03 2.1 LOW N/A
Denial of service in AIX ptrace system call allows local users to crash the system.
CVE-2002-1621 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.
CVE-2005-0263 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.
CVE-2006-0118 1 Ibm 3 Lotus Domino, Lotus Domino Enterprise Server, Lotus Notes 2025-04-03 5.0 MEDIUM N/A
Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service (deep recursion leading to stack overflow and crash) via long formulas.
CVE-2005-4737 1 Ibm 1 Db2 Universal Database 2025-04-03 7.5 HIGH N/A
IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU consumption) by "abnormally" terminating a connection, which prevents db2agents from being properly cleared.
CVE-1999-0112 2 Cde, Ibm 2 Cde, Aix 2025-04-03 7.2 HIGH N/A
Buffer overflow in AIX dtterm program for the CDE.
CVE-2003-0914 9 Compaq, Freebsd, Hp and 6 more 10 Tru64, Freebsd, Hp-ux and 7 more 2025-04-03 4.3 MEDIUM N/A
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.