WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product db2✕
Overview 13 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 EPSS ≥ 0.5
13matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 13 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 8 61.5% Medium 3 23.1% Low 2 15.4% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 13 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 13 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 3 / year
Not applicable: 13 Low: 2Medium: 3High: 8 not blocked: 13 Working exploit published: 13
20012 Not applicable2 High1 Low1 not blocked2 Working exploit published2 20020 20033 Not applicable3 High2 Medium1 not blocked3 Working exploit published3 20042 Not applicable2 High2 not blocked2 Working exploit published2 20052 Not applicable2 High1 Low1 not blocked2 Working exploit published2 20060 20070 20080 20091 Not applicable1 Medium1 not blocked1 Working exploit published1 20101 Not applicable1 Medium1 not blocked1 Working exploit published1 20111 Not applicable1 High1 not blocked1 Working exploit published1 20120 20130 20140 20150 20160 20171 Not applicable1 High1 not blocked1 Working exploit published1
200120032005200720092011201320152017
13 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2017-1297 High 2017-06-27 Not applicable Working exploit published IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code. IBM X-Force ID: 125159.
CVE-2010-4945 High 2011-10-09 Not applicable Working exploit published SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVE-2010-0462 Medium 2010-01-28 Not applicable Working exploit published Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impact via a SELECT statement that has a long column name generated with the REPEAT function.
CVE-2009-0172 Medium 2009-01-16 Not applicable Working exploit published Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.
CVE-2005-4869 Low 2005-12-31 Not applicable Working exploit published The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application crash) via an empty string in the second parameter, which causes a null pointer dereference.
CVE-2005-4868 High 2005-12-31 Not applicable Working exploit published Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.
CVE-2003-1052 High 2004-09-28 Not applicable Working exploit published IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.
CVE-2003-1051 High 2004-09-28 Not applicable Working exploit published Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
CVE-2003-0898 Medium 2003-11-17 Not applicable Working exploit published IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.
CVE-2003-0759 High 2003-10-06 Not applicable Working exploit published Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument.
CVE-2003-0758 High 2003-10-06 Not applicable Working exploit published Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command line argument.
CVE-2001-0052 Low 2001-02-16 Not applicable Working exploit published IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.
CVE-2001-0051 High 2001-02-16 Not applicable Working exploit published IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database.