Vulnerabilities
Summary — last 7 days
New vulnerabilities4,998▲ 140 vs. last week
Critical / high2,116▼ 664 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)824▲ 761 vs. last week
More filters
8 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 76% | Exploit | IBM Informix Open Admin Tool | 5/22/2017 | 6/17/2026 | IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390. | |
| Modified | High (10) | 40% | Exploit | IBM Informix Dynamic ServerEMC Legato Networker | 3/5/2010 | 6/16/2026 | Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execute arbitrary code… | |
| Modified | High (10) | 11% | Exploit | IBM Informix Dynamic Server | 3/5/2010 | 6/16/2026 | Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3, allow remote attackers to execute arbitrary code via a crafted parameter… | |
| Modified | High (9.3) | 7.0% | Exploit | IBM Informix Client SDKIBM Informix Connect Runtime | 10/13/2009 | 6/16/2026 | Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow… | |
| Modified | High (7.2) | 1.4% | Exploit | IBM Informix Dynamic ServerIBM Informix Extended Parallel Server | 1/27/2004 | 6/16/2026 | Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable. | |
| Modified | High (7.2) | 1.1% | Exploit | IBM Informix | 10/4/2002 | 6/16/2026 | Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable. | |
| Modified | High (7.5) | 6.7% | Exploit | IBM Informix WEB Datablade | 7/3/2002 | 6/16/2026 | webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request. | |
| Modified | Medium (5) | 8.1% | Exploit | IBM Informix WEB Datablade | 11/22/2001 | 6/16/2026 | Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter. |