dbcve.org
Vulnerability index

Browse CVEs

14 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Stack-based Buffer OverflowCWE-121 × clear
Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Db2 CRITICAL 9.8
CVE-2026-10534

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

No fix yet
Fix from $5,750 2026-08-12
Informix Dynamic Server HIGH 8.8
CVE-2026-13361

IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.

No fix yet
Fix from $4,900 2026-08-12
Db2 HIGH 7.8
CVE-2026-10535

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc.

Fix: 12.1.5+
Fix from $1,950 2026-07-30
Aspera High Speed Transfer Endpoint HIGH 8.8
CVE-2026-8179

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and I…

Fix: after 4.4.6
Fix from $1,950 2026-05-27
Db2 HIGH 7.5
CVE-2024-47118

IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 C…

Fix: after 12.1.3
Fix from $1,950 2025-11-07
Db2 HIGH 7.8
CVE-2025-33092

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local u…

Mitigation only
Fix from $1,950 2025-07-29
Db2 HIGH 7.5
CVE-2024-49828

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.…

Fix: after 12.1.2
Fix from $1,950 2025-07-29
Db2 HIGH 7.5
CVE-2024-51473

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.…

Fix: after 12.1.2
Fix from $1,950 2025-07-29
Websphere Application Server HIGH 7.5
CVE-2025-36097

IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused…

Fix: 9.0.5.24 / 25.0.0.8+
Fix from $1,950 2025-07-16
Infosphere Data Replication MEDIUM 6.5
CVE-2024-56468

IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP re…

Mitigation only
Fix from $1,600 2025-07-08
Db2 HIGH 7.5
CVE-2024-49350

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnera…

Fix: after 12.1.1
Fix from $1,950 2025-05-29
Db2 MEDIUM 6.7
CVE-2023-35012

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow,…

Mitigation only
Fix from $1,600 2023-07-17
App Connect Enterprise MEDIUM 6.5
CVE-2022-42444

IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user coul…

Fix: after 12.0.5.0
Fix from $1,600 2023-02-12
Ibm Rational Lifecycle Integration Adapter For Windchill MEDIUM 5.3
CVE-2021-34587

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack va…

Fix: 5.11.2 / 5.12.5+
Fix from $1,600 2022-04-27