CVE-2020-4739: Untrusted Search Path

IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft...

CVE-2020-4701: Buffer Copy without Checking Size of Input

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges...

PT-2020-18210

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 10.5, 11.1, and 11.5 Description The issue is caused by improper bounds checking, leading to a buffer overflow. This could allow a local attacker to execute arbitrary cod...

CVE-2020-12333: Insufficiently Protected Credentials

Insufficiently protected credentials in the IntelR QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2020-4913

Name of the Vulnerable Software and Affected Versions: IntelR QAT for Linux versions prior to 1.7.l.4.10.0 Description: The issue is related to insufficiently protected credentials in the IntelR QAT for Linux, which may allow an authenticated user to potentially enable escalation of privilege via...

CVE-2020-9861

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...

PT-2020-20813

Name of the Vulnerable Software and Affected Versions Swift for Linux affected versions not specified Description A stack overflow issue existed due to deeply nested malicious JSON input. The issue was addressed with improved input validation. Recommendations At the moment, there is no informatio...

CVE-2020-9861: Uncontrolled Recursion

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...

Veeam Agent for Linux - Expired Sectigo RootCA Certificates

Challenge Veeam Agent for Linux connecting to a Cloud Repository with a seemingly valid Cloud certificate fails with "certificate has expired". Cause On May 30th of 2020, Sectigo had an expired Root CA that will not be updated due to the age of the certificate...

CVE-2020-24561: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system. An attacker must first obtain admin/root privileges on the SPLX console to exploit this vulnerability...

PT-2020-15736

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 Description A command injection issue could allow an attacker to execute arbitrary code on an affected system. The attacker must first obtain admin/root privileges on the SPLX console to exploit...

CVE-2020-15590

A vulnerability in the Private Internet Access PIA VPN Client for Linux 1.5 through 2.3+ allows remote attackers to bypass an intended VPN kill switch mechanism and read sensitive information via intercepting network traffic. Since 1.5, PIA has supported a “split tunnel” OpenVPN bypass option. Th...

PT-2020-14516

Name of the Vulnerable Software and Affected Versions Private Internet Access PIA VPN Client for Linux versions 1.5 through 2.3 Description A vulnerability in the Private Internet Access PIA VPN Client for Linux allows remote attackers to bypass an intended VPN kill switch mechanism and read...

CVE-2020-8574: Undefined Security Weakness

Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation JMX RMI service enabled allowing unauthorized code execution to local users...

PT-2020-20217

Name of the Vulnerable Software and Affected Versions Active IQ Unified Manager for Linux versions prior to 9.6 Description The issue allows unauthorized code execution to local users due to the Java Management Extension Remote Method Invocation JMX RMI service being enabled. Recommendations For...

CVE-2020-1423

An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'...

PT-2020-3183

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the way the Windows Subsystem for Linux handles files. It is also associated with errors in processing...

CVE-2020-1423: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'...

CVE-2020-5908: Insertion of Sensitive Information into Log File

In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files...

CVE-2020-4420: Improper Resource Shutdown or Release

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076...