CVE-2023-27869 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

PT-2023-5224 · Ibm · Ibm Db2 Jdbc Driver

Name of the Vulnerable Software and Affected Versions: IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows versions 10.5, 11.1, and 11.5 Description: The issue is related to an unchecked logger injection in the IBM Db2 JDBC Driver, which could allow a remote authenticated attacker to execute...

CVE-2023-27869: Improper Control of Generation of Code

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

Malicious code in typeahead-client-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9121846b93247c8f8db2f98b553de9231e63282325f9bbaff65e8b6916d2a6cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-916 Malicious code in typeahead-client-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9121846b93247c8f8db2f98b553de9231e63282325f9bbaff65e8b6916d2a6cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerabilities fixed in Microfocus ArcSight Logger

Micro Focus has fixed vulnerabilities in ArcSight Logger. A malicious party could exploit the vulnerabilities to launch a Cross-site Scripting attack, or an XML External Entity Injection. Such an attack can lead to execution of arbitrary code in the context of the victim's browser, or access data...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

Xxe

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

Cross site scripting

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

Micro Focus ArcSight Logger 代码问题漏洞

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analyzing and retention. A security vulnerability exists in Micro Focus ArcSight Logg...

Micro Focus ArcSight Logger 跨站脚本漏洞

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log-generating source for log management, searching, indexing, reporting, analysis and retention. A security vulnerability exists in Micro Focus ArcSight Logge...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

CVE-2023-24469 affects Micro Focus ArcSight Logger prior to 7.3.0. The vulnerability is a Cross-Site Scripting issue arising in the web interface, with CVSS 3.1 base score 6.1 (Network, Low attack complexity, UI interaction required). Public advisories indicate that Micro Focus released version 7...

CVE-2023-24470

ArcSight Logger prior to version 7.3.0 is vulnerable to XML External Entity (XXE) injection (CVE-2023-24470). The root cause is XXE in the product’s XML processing, enabling an attacker to potentially access or exfiltrate data via crafted XML. Public advisories confirm fixes in ArcSight Logger 7....