CVE-2022-21813: Improper Access Control

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service...

CVE-2022-21814: Improper Handling of Insufficient Permissions or Privileges

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service...

PT-2022-15864

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux versions 20 and below Description A code injection issue could allow an attacker to escalate privileges and run arbitrary code in the context of root. The attacker mus...

PT-2022-15862

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux versions 20 and below Description A directory traversal issue could allow an attacker to read arbitrary files from the file system. The attacker must first obtain...

PT-2022-2159

Name of the Vulnerable Software and Affected Versions VMware Horizon Agent for Linux versions prior to 22.x Description The issue is related to a local privilege escalation vulnerability due to a symbolic link tracking flaw. This allows an attacker to potentially elevate their privileges. The...

PT-2021-22355

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt...

PT-2021-18401

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue allows a user with DBADM authority to access other databases and read or modify files. Recommendations For versions...

CVE-2021-39002: Use of a Broken or Risky Cryptographic Algorithm

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

PT-2021-22326

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.1 through 11.5 Description The issue is related to an information disclosure where a connected user has indirect read access to a table they are not authorized to sele...

PT-2021-22325

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue allows a local user to gain privileges due to allowing modification of columns of existing tasks. Recommendations Fo...

CVE-2021-29678: Incorrect Authorization

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914...

PT-2021-20962

Name of the Vulnerable Software and Affected Versions: Bitdefender Endpoint Security Tools for Linux versions prior to 6.6.27.390 Bitdefender Endpoint Security Tools for Linux versions prior to 7.1.2.33 Bitdefender Unified Endpoint versions prior to 6.2.21.160 Bitdefender GravityZone versions pri...

PT-2021-5485

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools versions prior to 6.6.27.390 Bitdefender Endpoint Security Tools versions prior to 7.1.2.33 Bitdefender Unified Endpoint for Linux versions prior to 6.2.21.160 Bitdefender GravityZone versions prior to...

CVE-2021-3554: Improper Access Control

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions...

CVE-2021-3553: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a proxy for any remote host. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions...

PT-2021-7170

Name of the Vulnerable Software and Affected Versions IntelR Ethernet ixgbe driver for Linux versions prior to 3.17.3 Description The issue is caused by insufficient input validation in the IntelR Ethernet ixgbe driver for Linux. This can potentially allow an authenticated user to cause a denial ...

New Malware Targets Windows Subsystem for Linux to Evade Detection

A number of malicious samples have been created for the Windows Subsystem for Linux WSL with the goal of compromising Windows machines, highlighting a sneaky method that allows the operators to stay under the radar and thwart detection by popular anti-malware engines. The "distinct tradecraft"...

PT-2021-18505

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server affected versions not specified Description The issue could disclose sensitive information when using ADMIN CMD with LOAD or BACKUP. There is no information provided about the...

PT-2021-18461

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1 and 11.5 Description The issue could allow a local user to keep running a procedure that could cause the system to run out of memory and cause a denial of service...

CVE-2021-29763: Allocation of Resources Without Limits or Throttling

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. IBM X-Force ID: 202267...