PT-2020-3183

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the way the Windows Subsystem for Linux handles files. It is also associated with errors in processing...

CVE-2020-1423: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'...

PT-2020-18806

Name of the Vulnerable Software and Affected Versions Edge Client for Linux versions 11.6.1 through 11.6.5.2 Edge Client for Linux versions 12.1.0 through 12.1.5 Description The issue exposes the full session ID in local log files, potentially allowing unauthorized access to sensitive information...

CVE-2020-4387: Concurrent Execution using Shared Resource with Improper Synchronization

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to obtain sensitive information using a race condition of a symbolic link. IBM X-Force ID: 179269...

CVE-2020-4363: Buffer Copy without Checking Size of Input

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 178960...

CVE-2020-4355: Undefined Security Weakness

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service, caused by improper handling of Secure Sockets Layer SSL renegotiation requests. By sending specially-crafted requests, a remote attacker could exploit this...

CVE-2020-4420: Improper Resource Shutdown or Release

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076...

CVE-2020-4414: Undefined Security Weakness

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an attacker could exploit this vulnerabili...

CVE-2020-5908: Insertion of Sensitive Information into Log File

In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files...

PT-2020-6085

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue is related to the improper handling of Secure Sockets Layer SSL renegotiation requests, which can lead to a denial o...

PT-2020-6087

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue is caused by improper bounds checking, leading to a buffer overflow. This could allow a local attacker to execute...

PT-2020-6086

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue is related to errors in resource release, which could allow an unauthenticated attacker to cause a denial of service...

PT-2020-6098

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue is caused by synchronization errors when using a shared resource, allowing a local user to obtain sensitive...

Beauty Parlour Management System 1.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Beauty Parlour Management System 1.0 - Authentication Bypass Exploit Author: Prof. Kailas PATIL krp Vendor Homepage: https://phpgurukul.com/ Software Link:...

WSL Unauthorized Access

The vulnerability of the compatibility subsystem for running Linux applications in Windows Subsystem for Linux WSL operating systems is related to object handling errors in the kernel. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through...

CVE-2020-1075

An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'...

CVE-2020-1075

An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. A attacker could exploit this vulnerability by running ...

Information disclosure

An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'...

CVE-2020-1075: Undefined Security Weakness

An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. A attacker could exploit this vulnerability by running ...

PT-2020-2452

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux affected versions not specified Description The issue is related to improper handling of objects in memory by the Windows Subsystem for Linux, which can lead to information disclosure. An attacker could exploit this...