Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Total 8223 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-1110 1 Ibm 1 Net.data 2026-04-16 5.0 MEDIUM N/A
document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.
CVE-2005-0262 1 Ibm 1 Aix 2026-04-16 7.2 HIGH N/A
Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument.
CVE-1999-0903 1 Ibm 1 Aix 2026-04-16 7.5 HIGH N/A
genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.
CVE-2003-0784 1 Ibm 1 Aix 2026-04-16 10.0 HIGH N/A
Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers.
CVE-2002-0086 1 Ibm 1 Lotus Domino 2026-04-16 7.2 HIGH N/A
Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.
CVE-2003-0123 1 Ibm 2 Lotus Domino, Lotus Notes Client 2026-04-16 5.0 MEDIUM N/A
Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.
CVE-2001-1079 1 Ibm 1 Aix 2026-04-16 3.6 LOW N/A
create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.
CVE-2002-0747 1 Ibm 1 Aix 2026-04-16 10.0 HIGH N/A
Buffer overflow in lsmcode in AIX 4.3.3.
CVE-2004-0668 1 Ibm 1 Lotus Domino 2026-04-16 5.0 MEDIUM N/A
Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail message, as demonstrated using a large image attachment.
CVE-1999-1480 1 Ibm 1 Aix 2026-04-16 1.2 LOW N/A
(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.
CVE-1999-0129 7 Bsdi, Eric Allman, Freebsd and 4 more 9 Bsd Os, Sendmail, Freebsd and 6 more 2026-04-16 4.6 MEDIUM N/A
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
CVE-2005-1238 1 Ibm 1 Iseries As 400 2026-04-16 7.5 HIGH N/A
By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request.
CVE-2001-1191 1 Ibm 1 Tivoli Secureway Policy Director 2026-04-16 5.0 MEDIUM N/A
WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.
CVE-2005-4867 1 Ibm 1 Db2 Universal Database 2026-04-16 9.3 HIGH N/A
Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabled, allows remote attackers to execute arbitrary code via a long parameter.
CVE-2005-0261 1 Ibm 1 Aix 2026-04-16 2.1 LOW N/A
lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files.
CVE-2003-0827 1 Ibm 1 Db2 Universal Database 2026-04-16 5.0 MEDIUM N/A
The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523.
CVE-2005-3060 1 Ibm 1 Aix 2026-04-16 7.2 HIGH N/A
Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via unknown vectors.
CVE-2006-3232 1 Ibm 1 Websphere Application Server 2026-04-16 10.0 HIGH N/A
Unspecified vulnerability in IBM WebSphere Application Server before 6.0.2.11 has unknown impact and attack vectors because the "UserNameToken cache was improperly used."
CVE-2005-1133 1 Ibm 1 Iseries As 400 2026-04-16 5.0 MEDIUM N/A
The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server.
CVE-2006-0120 1 Ibm 3 Lotus Domino, Lotus Domino Enterprise Server, Lotus Notes 2026-04-16 5.0 MEDIUM N/A
Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors, involving (1) a malformed message sent to an "Out Of Office" agent (SPR LPEE6DMQWJ), (2) the compact command (RTIN5U2SAJ), (3) malformed bitmap images (MYAA6FH5HW), (4) the "Delete Attachment" action (YPHG6844LD), (5) parsing certificates from a remote Certificate Table (AELE6DZFJW), and (6) creating a SSL key ring with the Domino Administration client (NSUA4FQPTN).