Vulnerabilities > IBM

DATE CVE VULNERABILITY TITLE RISK
2024-01-26 CVE-2024-23620 Improper Privilege Management vulnerability in IBM Merge Efilm Workstation 4.2
An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation.
local
low complexity
ibm CWE-269
7.8
2024-01-26 CVE-2024-23621 Classic Buffer Overflow vulnerability in IBM Merge Efilm Workstation 4.2
A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server.
network
low complexity
ibm CWE-120
critical
9.8
2024-01-26 CVE-2024-23622 Out-of-bounds Write vulnerability in IBM Merge Efilm Workstation 4.2
A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server.
network
low complexity
ibm CWE-787
critical
9.8
2024-01-22 CVE-2023-47141 Unspecified vulnerability in IBM DB2
IIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query.
network
low complexity
ibm
6.5
2024-01-22 CVE-2023-27859 Unspecified vulnerability in IBM DB2
IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases.
network
low complexity
ibm
6.5
2024-01-22 CVE-2023-47152 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under exceptional conditions.
network
low complexity
ibm
7.5
2024-01-22 CVE-2023-47158 Unspecified vulnerability in IBM DB2
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1 and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query.
network
low complexity
ibm
6.5
2024-01-22 CVE-2023-47747 Unspecified vulnerability in IBM DB2
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query.
network
low complexity
ibm
6.5
2024-01-22 CVE-2023-45193 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used.
network
low complexity
ibm
7.5
2024-01-22 CVE-2023-47746 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query.
network
low complexity
ibm
6.5