PT-2022-2159

Name of the Vulnerable Software and Affected Versions VMware Horizon Agent for Linux versions prior to 22.x Description The issue is related to a local privilege escalation vulnerability due to a symbolic link tracking flaw. This allows an attacker to potentially elevate their privileges. The...

PT-2021-22355

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt...

PT-2021-18401

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue allows a user with DBADM authority to access other databases and read or modify files. Recommendations For versions...

PT-2021-22326

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.1 through 11.5 Description The issue is related to an information disclosure where a connected user has indirect read access to a table they are not authorized to sele...

CVE-2021-39002: Use of a Broken or Risky Cryptographic Algorithm

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

PT-2021-22325

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue allows a local user to gain privileges due to allowing modification of columns of existing tasks. Recommendations Fo...

CVE-2021-29678: Incorrect Authorization

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914...

PT-2021-20962

Name of the Vulnerable Software and Affected Versions: Bitdefender Endpoint Security Tools for Linux versions prior to 6.6.27.390 Bitdefender Endpoint Security Tools for Linux versions prior to 7.1.2.33 Bitdefender Unified Endpoint versions prior to 6.2.21.160 Bitdefender GravityZone versions pri...

PT-2021-5485

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools versions prior to 6.6.27.390 Bitdefender Endpoint Security Tools versions prior to 7.1.2.33 Bitdefender Unified Endpoint for Linux versions prior to 6.2.21.160 Bitdefender GravityZone versions prior to...

CVE-2021-3554: Improper Access Control

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions...

CVE-2021-3553: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a proxy for any remote host. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions...

PT-2021-7170

Name of the Vulnerable Software and Affected Versions IntelR Ethernet ixgbe driver for Linux versions prior to 3.17.3 Description The issue is caused by insufficient input validation in the IntelR Ethernet ixgbe driver for Linux. This can potentially allow an authenticated user to cause a denial ...

New Malware Targets Windows Subsystem for Linux to Evade Detection

A number of malicious samples have been created for the Windows Subsystem for Linux WSL with the goal of compromising Windows machines, highlighting a sneaky method that allows the operators to stay under the radar and thwart detection by popular anti-malware engines. The "distinct tradecraft"...

CVE-2021-29763: Allocation of Resources Without Limits or Throttling

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. IBM X-Force ID: 202267...

PT-2021-18505

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server affected versions not specified Description The issue could disclose sensitive information when using ADMIN CMD with LOAD or BACKUP. There is no information provided about the...

CVE-2021-29825: Undefined Security Weakness

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could disclose sensitive information when using ADMINCMD with LOAD or BACKUP. IBM X-Force ID: 204470...

PT-2021-18461

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1 and 11.5 Description The issue could allow a local user to keep running a procedure that could cause the system to run out of memory and cause a denial of service...

CVE-2021-36966: Improper Privilege Management

Windows Subsystem for Linux Elevation of Privilege Vulnerability...

PT-2021-6318 · Microsoft · Windows Subsystem For Linux +1

Name of the Vulnerable Software and Affected Versions: Windows Subsystem for Linux affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Subsystem for Linux, which can be exploited to elevate privileges. This could allow an attacker t...

CVE-2021-29703

Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200659...