All CVEs — page 558 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows a remote attacker with valid credentials to execute arbitrary SQL commands, leading to potential data breaches or system compromise.
A remote attacker with authentication could execute arbitrary code due to improper input handling in IBM Guardium Data Protection 12.2, posing a significant security risk.
The flaw allows a remote authenticated attacker to execute arbitrary SQL commands, posing a significant risk to database security.
The flaw is a hardcoded credentials vulnerability in IBM Guardium Data Protection 12.2, allowing low-privileged authenticated users to recover sensitive secrets, potentially leading to unauthorized access and data compromise.
A remote attacker with valid credentials could execute arbitrary code, leading to full system compromise.
IBM Guardium Data Protection 12.2 allows unauthenticated attackers to bypass IP-based access controls and access the management interface, leading to unauthorized access.
A path traversal vulnerability in IBM Guardium Data Protection 12.2 allows authenticated attackers to access files and directories beyond the intended scope, potentially leading to data exposure or system compromise. This affects the system's ability to properly validate file paths.
A local attacker could exploit a flaw in IBM Guardium Data Protection 12.2 to gain elevated privileges, leading to potential data breaches and unauthorized access.
This flaw allows a remote attacker to execute arbitrary commands due to improper handling of OS commands, posing a significant risk to system security.
This flaw allows a remote authenticated attacker to execute arbitrary commands on the system due to improper handling of OS commands, posing a significant security risk.
The flaw allows a remote authenticated attacker to gain elevated privileges via the REST API due to missing authorization checks, posing a significant security risk.
This flaw allows a remote authenticated attacker to execute arbitrary code due to improper input handling, posing a critical risk.
The flaw allows unauthenticated attackers to exploit insecure deserialization and reflective method dispatch, potentially leading to code execution on the IBM Guardium appliance.
The flaw allows a low-privileged authenticated user to inject SQL statements, potentially leading to unauthorized data access and system impact.
The flaw allows a remote unauthenticated attacker to execute arbitrary code on the system by deserializing untrusted data, posing a critical risk.
The flaw allows a low-privileged authenticated user to inject SQL statements, potentially leading to unauthorized data access and system impact.
The flaw is a SQL injection vulnerability in IBM Guardium Data Protection 12.2, allowing unauthenticated users to inject SQL statements and potentially gain unauthorized access to data.
The flaw allows an authenticated attacker to inject OS commands, potentially leading to unauthorized command execution and system compromise.
The flaw is an unauthenticated second-order SQL injection vulnerability in IBM Guardium Data Protection 12.2, allowing remote attackers to inject malicious SQL and potentially compromise the system’s confidentiality, integrity, and availability.