IBM DB2 DoS (7165342) (Windows)

According to its self-reported version number, IBM Db2 on Windows is vulnerable to a denial of service when querying certain tables using a specially crafted statement. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

IBM DB2 DoS (7165342) (Unix)

According to its self-reported version number, IBM Db2 on Unix is vulnerable to a denial of service when querying certain tables using a specially crafted statement. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

IBM DB2 DoS (7165341) (Unix)

According to its self-reported version number, IBM Db2 on Unix is vulnerable to a denial of service with a specially crafted query under certain conditions. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

IBM DB2 DoS (7165341) (Windows)

According to its self-reported version number, IBM Db2 on Windows is vulnerable to a denial of service with a specially crafted query under certain conditions. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...

Security Bulletin: IBM® Db2® federated server is vulnerable to a denial of service with a specially crafted query under certain conditions (CVE-2024-35136)

Summary IBM® Db2® federated server is vulnerable to a denial of service with a specially crafted query under certain conditions. Vulnerability Details CVEID:CVE-2024-35136 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server federated server is vulnerable to denial of...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service with a specially crafted query (CVE-2024-37529)

Summary IBM® Db2® is vulnerable to a denial of service with a specially crafted query. Vulnerability Details CVEID:CVE-2024-37529 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of service with a specially crafted...

CVE-2024-5914

A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container...

CVE-2024-5914

A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container...

CVE-2024-5914 Cortex XSOAR: Command Injection in CommonScripts Pack

A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container...

CVE-2024-5914

CVE-2024-5914 affects Palo Alto Networks Cortex XSOAR CommonScripts Pack (versions before 1.12.33). The vulnerability arises in the CommonScripts ScheduleGenericPolling or GenericPollingScheduledTask scripts, allowing an unauthenticated attacker to execute arbitrary commands within the context of...

Security Bulletin: IBM WebSphere Application Server is vulnerable to an information disclosure (CVE-2023-50315)

Summary IBM WebSphere Application Server is vulnerable to an information disclosure. Vulnerability Details CVEID:CVE-2023-50315 DESCRIPTION: IBM WebSphere Application Server could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerabilit...

Cortex XSOAR: Command Injection in CommonScripts Pack

A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container. Work around: Remove any integration usage of the ScheduleGenericPolling or GenericPollingScheduledTask...

CVE-2024-22376

CVE-2024-22376 concerns an issue in the Intel® Ethernet Adapter Driver Pack software installer. According to Intel’s advisory (INTEL-SA-01106) and corroborating Red Hat/NVD entries, installation software prior to version 28.3 contains an uncontrolled search path element that could allow an authen...

CVE-2024-22376

Uncontrolled search path element in some installation software for IntelR Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-8732 · Palo Alto Networks · Palo Alto Networks Cortex Xsoar Commonscripts Pack

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XSOAR CommonScripts Pack versions prior to 1.12.33 Description: A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service when querying certain tables using a specially crafted statement (CVE-2024-35152)

Summary IBM® Db2® is vulnerable to a denial of service when querying certain tables using a specially crafted statement. Vulnerability Details CVEID:CVE-2024-35152 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of...

CVE-2024-7247

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Custom Gallery and Countdown widgets in all versions up to, and including, 5.7.2 due to insufficient input...

CVE-2024-7247

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Custom Gallery and Countdown widgets in all versions up to, and including, 5.7.2 due to insufficient input...

CVE-2024-7247 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Countdown Widgets

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Custom Gallery and Countdown widgets in all versions up to, and including, 5.7.2 due to insufficient input...

CVE-2024-7247 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Countdown Widgets

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Custom Gallery and Countdown widgets in all versions up to, and including, 5.7.2 due to insufficient input...