
CVE-2023-33168 – Remote Procedure Call Runtime Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2023-33168
11 Jul 2023 — Remote Procedure Call Runtime Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33168 • CWE-126: Buffer Over-read •

CVE-2023-33167 – Remote Procedure Call Runtime Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2023-33167
11 Jul 2023 — Remote Procedure Call Runtime Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33167 • CWE-126: Buffer Over-read •

CVE-2023-33166 – Remote Procedure Call Runtime Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2023-33166
11 Jul 2023 — Remote Procedure Call Runtime Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33166 • CWE-126: Buffer Over-read •

CVE-2023-21756 – Windows Win32k Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-21756
11 Jul 2023 — Windows Win32k Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21756 • CWE-416: Use After Free •

CVE-2021-42083 – Authenticated Stored XSS in OSNEXUS QuantaStor 6.0.0.335
https://notcve.org/view.php?id=CVE-2021-42083
10 Jul 2023 — An authenticated attacker is able to create alerts that trigger a stored XSS attack. • https://csirt.divd.nl/CVE-2021-42083 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVE-2023-30442 – IBM Db2 denial of service
https://notcve.org/view.php?id=CVE-2023-30442
10 Jul 2023 — IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options. IBM X-Force ID: 253202. • https://exchange.xforce.ibmcloud.com/vulnerabilities/253202 • CWE-20: Improper Input Validation •

CVE-2023-30431 – IBM Db2 buffer overflow
https://notcve.org/view.php?id=CVE-2023-30431
09 Jul 2023 — IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184. • https://exchange.xforce.ibmcloud.com/vulnerabilities/252184 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2023-23487 – IBM Db2 audit logging
https://notcve.org/view.php?id=CVE-2023-23487
09 Jul 2023 — IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: 245918. • https://exchange.xforce.ibmcloud.com/vulnerabilities/245918 •

CVE-2023-27558 – IBM Db2 privilege escalation
https://notcve.org/view.php?id=CVE-2023-27558
09 Jul 2023 — IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in the path of the affected service. IBM X-Force ID: 249194. • https://exchange.xforce.ibmcloud.com/vulnerabilities/249194 • CWE-269: Improper Privilege Management •

CVE-2023-29256 – IBM Db2 information disclosure
https://notcve.org/view.php?id=CVE-2023-29256
09 Jul 2023 — IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046. • https://exchange.xforce.ibmcloud.com/vulnerabilities/252046 • CWE-269: Improper Privilege Management •