VYPR

Ibm Db

by IBM

CVEs (1)

  • CVE-2016-10577HigMay 29, 2018
    risk 0.46cvss 8.1epss 0.02

    ibm_db is an asynchronous/synchronous interface for node.js to IBM DB2 and IBM Informix. ibm_db before 1.0.2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested…