CVE-2023-45193: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 268759...

CVE-2024-20681 Windows Subsystem for Linux Elevation of Privilege Vulnerability

...

CVE-2024-20681

CVE-2024-20681 affects Windows Subsystem for Linux and enables local elevation of privilege. CVSS v3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, user interaction NONE; impacts on confidentiality, integrity, and availability are HIGH. Connected documents reference Window...

CVE-2024-0213

A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service DoS, through exploiting a memory corruption issue in the TA service, which runs as root. This may also result in the disabling of event...

CVE-2024-0213: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service DoS, through exploiting a memory corruption issue in the TA service, which runs as root. This may also result in the disabling of event...

CVE-2024-20681: Use After Free

Windows Subsystem for Linux Elevation of Privilege Vulnerability...

PT-2023-31552 · Unknown +1 · Zed! For Mac +5

Name of the Vulnerable Software and Affected Versions: ZED! for Windows versions before Q.2020.3 through Q.2021.2 ZONECENTRAL for Windows versions before Q.2021.2 through 2023.5 ZEDMAIL for Windows versions before 2023.5 ZED! for Windows, Mac, Linux versions before 2023.5 Description: The issue...

CVE-2023-47701: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 266166...

CVE-2023-40687: Improper Input Validation

IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table. IBM X-Force ID: 264809...

CVE-2023-46167: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367...

CVE-2023-38003: Undefined Security Weakness

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214...

CVE-2023-29258: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated query on specific federation objects. IBM X-Force ID: 252048...

CVE-2023-40692: Uncontrolled Resource Consumption

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807...

CVE-2023-45178: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073...

CVE-2023-38728: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted XML query statement. IBM X-Force ID: 262258...

PT-2023-6239

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description The issue is related to errors in processing input data, which can be exploited by a remote attacker to cause a denial of service with a...

PT-2023-6241

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description The issue is related to errors in processing input data, which can be exploited by a remote attacker to cause a denial of service. This c...

CVE-2023-40374: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 is vulnerable to denial of service with a specially crafted query statement. IBM X-Force ID: 263575...

CVE-2023-30987: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440...

CVE-2023-38740: Improper Input Validation

IBM Db2 for Linux, UNIX, and Windows includes Db2 Connect Server 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: 262613...