# Ibm Db2


- [CVE-2012-1797](https://insights.sbomify.com/CVE-2012-1797/): IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors. (critical 10.0)
- [CVE-2010-3731](https://insights.sbomify.com/CVE-2010-3731/): Memory corruption in n/a (critical 10.0)
- [CVE-2010-3193](https://insights.sbomify.com/CVE-2010-3193/): Other in n/a (critical 10.0)
- [CVE-2009-4335](https://insights.sbomify.com/CVE-2009-4335/): Other in n/a (critical 10.0)
- [CVE-2009-3473](https://insights.sbomify.com/CVE-2009-3473/): Missing authorization in n/a (critical 10.0)
- [CVE-2008-6820](https://insights.sbomify.com/CVE-2008-6820/): Privilege escalation in n/a (critical 10.0)
- [CVE-2008-6821](https://insights.sbomify.com/CVE-2008-6821/): Memory corruption in n/a (critical 10.0)
- [CVE-2008-4692](https://insights.sbomify.com/CVE-2008-4692/): Other in n/a (critical 10.0)
- [CVE-2007-3676](https://insights.sbomify.com/CVE-2007-3676/): Memory corruption in n/a (critical 10.0)
- [CVE-2007-2582](https://insights.sbomify.com/CVE-2007-2582/): Memory corruption in n/a (critical 10.0)
- [CVE-2026-10109](https://insights.sbomify.com/CVE-2026-10109/): IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling (critical 9.8)
- [CVE-2012-3324](https://insights.sbomify.com/CVE-2012-3324/): Path traversal in n/a (critical 9.0)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/db2/