Design/Logic Flaw

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

IBM DB2 代码注入漏洞

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from a code execution vulnerability that originates from an unchecked logger...

MAL-2023-1106 Malicious code in @shennong/web-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2fd786e967b26aa2bbe8f8367eda2745ce70026f11bcc9b832e3bcb93433b58 The OpenSSF Package Analysis project identified '@shennong/web-logger' @ 25.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in @shennong/web-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2fd786e967b26aa2bbe8f8367eda2745ce70026f11bcc9b832e3bcb93433b58 The OpenSSF Package Analysis project identified '@shennong/web-logger' @ 25.0.1 npm as malicious. It is considered malicious because: - The...

CVE-2023-27869 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

CVE-2023-27869 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

PT-2023-5224 · Ibm · Ibm Db2 Jdbc Driver

Name of the Vulnerable Software and Affected Versions: IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows versions 10.5, 11.1, and 11.5 Description: The issue is related to an unchecked logger injection in the IBM Db2 JDBC Driver, which could allow a remote authenticated attacker to execute...

CVE-2023-27869: Improper Control of Generation of Code

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

Malicious code in typeahead-client-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9121846b93247c8f8db2f98b553de9231e63282325f9bbaff65e8b6916d2a6cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-916 Malicious code in typeahead-client-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9121846b93247c8f8db2f98b553de9231e63282325f9bbaff65e8b6916d2a6cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerabilities fixed in Microfocus ArcSight Logger

Micro Focus has fixed vulnerabilities in ArcSight Logger. A malicious party could exploit the vulnerabilities to launch a Cross-site Scripting attack, or an XML External Entity Injection. Such an attack can lead to execution of arbitrary code in the context of the victim's browser, or access data...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

Xxe

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

Cross site scripting

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

PT-2023-19627 · Micro Focus · Arcsight Logger

Name of the Vulnerable Software and Affected Versions: ArcSight Logger versions prior to 7.3.0 Description: The issue is related to a Potential XML External Entity Injection. Recommendations: For versions prior to 7.3.0, update to version 7.3.0 or later to resolve the issue...