Total
92 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-84247 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. | |||||
| CVE-2026-84246 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. | |||||
| CVE-2026-75875 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 9.8 CRITICAL |
| IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal. | |||||
| CVE-2026-80381 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 9.8 CRITICAL |
| IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection. | |||||
| CVE-2026-81932 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 8.6 HIGH |
| IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. | |||||
| CVE-2026-82895 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. | |||||
| CVE-2026-82900 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory. | |||||
| CVE-2026-84032 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 5.6 MEDIUM |
| IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation. | |||||
| CVE-2026-84035 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. | |||||
| CVE-2026-84057 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. | |||||
| CVE-2026-84058 | 1 Ibm | 1 Guardium Data Protection | 2026-10-14 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance. | |||||
| CVE-2026-84290 | 2 Ibm, Microsoft | 2 Guardium Data Protection, Windows | 2026-10-13 | N/A | 5.1 MEDIUM |
| IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileged local attacker to cause a system crash or perform limited kernel-memory reads. | |||||
| CVE-2026-84276 | 1 Ibm | 1 Guardium Data Protection | 2026-10-12 | N/A | 7.5 HIGH |
| IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the edge-controller process to terminate unexpectedly. | |||||
| CVE-2026-84275 | 1 Ibm | 1 Guardium Data Protection | 2026-10-12 | N/A | 7.5 HIGH |
| IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector. | |||||
| CVE-2026-84272 | 1 Ibm | 1 Guardium Data Protection | 2026-10-10 | N/A | 9.8 CRITICAL |
| IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters. | |||||
| CVE-2026-84278 | 1 Ibm | 1 Guardium Data Protection | 2026-10-10 | N/A | 7.2 HIGH |
| IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges. | |||||
| CVE-2026-84250 | 1 Ibm | 1 Guardium Data Protection | 2026-10-10 | N/A | 8.4 HIGH |
| IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges. | |||||
| CVE-2026-84245 | 1 Ibm | 1 Guardium Data Protection | 2026-10-10 | N/A | 7.8 HIGH |
| IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files. | |||||
| CVE-2026-82344 | 1 Ibm | 1 Guardium Data Protection | 2026-10-10 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system. | |||||
| CVE-2026-82335 | 1 Ibm | 1 Guardium Data Protection | 2026-10-10 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution. | |||||