11 matches found
MAL-2025-37334 Malicious code in tuti-miebogor65-sukiwir (npm)
The package tuti-miebogor65-sukiwir was found to contain malicious code...
CVE-2024-37334 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
...
Description of the security update for Microsoft OLE DB Driver for SQL Server: July 9, 2024
Description of the security update for Microsoft OLE DB Driver for SQL Server: July 9, 2024 Summary This security update resolves a vulnerability. To learn more about the vulnerability, see the following security advisory: CVE-2024-37334 - Microsoft OLE DB Driver for SQL Server Remote Code...
CVE-2023-37334
Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2023-37334 Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2022-37334
creationtimestamp| type| source ---|---|--- 2022-11-13 05:45:18+00:00| seen| https://t.me/cibsecurity/52888 2025-02-06 02:44:19+00:00| seen| Telegram/nJRHV2SItAI-8ADbVkF9Ws3zKLbs6Ym4bJ4o3AbANoMxRjQu...
CVE-2022-37334
Improper initialization in BIOS firmware for some IntelR NUC 11 Pro Kits and IntelR NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-37334
CVE-2022-37334 covers an issue in BIOS firmware for some Intel NUC 11 Pro Kits and NUC 11 Pro Boards, where improper initialization in affected BIOS versions prior to TNTGL357.0064 may allow an authenticated local user to escalate privileges. The Red Hat/CVE records and Intel advisory detail the ...
CVE-2021-37334
creationtimestamp| type| source ---|---|--- 2021-08-26 02:26:36+00:00| seen| https://t.me/cibsecurity/27893...
CVE-2021-37334
Umbraco Forms versions 4.0.0 through 8.7.5 (and older) are vulnerable to remote code execution and arbitrary file deletion due to file-extension validation occurring after files are stored in a temporary directory (%BASEDIR%/APP_DATA/TEMP/FileUploads/). The web.config protections restricting this...
PostgreSQL空字符CA SSL整数校验安全绕过漏洞
Bugraq ID: 37334 CVE ID:CVE-2009-4034 PostgreSQL是一款对象关系型数据库管理系统,支持扩展的SQL标准子集。 处理部分证书字段中嵌入空字符的SSL证书存在错误,攻击者可以利用漏洞伪造证书,进行中间人等攻击。 SSL证书中的空字符可用于伪造客户端或服务端验证,只影响启用了SSL,执行证书名校验或客户端证书验证,而其CA已经被诱骗发布了非法证书的用户。 PostgreSQL PostgreSQL 8.4.1 PostgreSQL PostgreSQL 8.3.8 PostgreSQL PostgreSQL 8.3.6 PostgreSQL...