Lucene search
+L

262 matches found

OSV
OSV
added 2023/05/12 11:5 a.m.6 views

OESA-2023-1270 qt5-qtbase security update

This package provides base tools, such as string, xml, and network handling. Security Fixes: Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and...

7.5CVSS8.2AI score0.0132EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/04/25 12:0 a.m.8 views

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.3AI score0.01463EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/04/15 1:15 a.m.6 views

CVE-2023-24607

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3...

7.5CVSS5.9AI score0.0132EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2023/03/23 4:9 a.m.7 views

SUSE CVE-2023-24607

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3...

7.5CVSS9.3AI score0.0132EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.9 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01188EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.9 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.9AI score0.0074EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/01 12:0 a.m.13 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted malicious packages remotely...

10CVSS8.3AI score0.0115EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/02/21 9:35 a.m.8 views

php: PDO:: quote() may return unquoted string due to an integer overflow

A flaw was found in PHP. This issue occurs due to an uncaught integer overflow in PDO::quote of PDOSQLite returning an improperly quoted string. With the implementation of sqlite3snprintf, it is possible to force the function to return a single apostrophe if the function is called on user-supplie...

9.1CVSS7.4AI score0.02134EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:8 a.m.8 views

SUSE CVE-2016-1249

The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service out-of-bounds read via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression...

5.9CVSS6.8AI score0.02428EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/02/14 12:0 a.m.1 views

PT-2023-1479 · Microsoft · Odbc Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The vulnerability is related to insufficient input validation in the Microsoft ODBC Driver for SQL Server. It allows an attacker to execute arbitrary code...

7.8CVSS9.8AI score0.00393EPSS
SaveExploits0References7
GithubExploit
GithubExploit
added 2022/12/09 10:35 a.m.8 views

Exploit for Incorrect Type Conversion or Cast in Amazon Amazon_Web_Services_Redshift_Java_Database_Connectivity_Driver

CVE-2022-41828 Amazon AWS Redshift JDBC Driver Remote Code...

8.8CVSS8.5AI score0.01544EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.20 views

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01849EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.12 views

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01849EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.10 views

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01849EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.9 views

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01849EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.10 views

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01849EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/17 12:0 a.m.17 views

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.2AI score0.01516EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.17 views

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code or perform arbitrary actions.

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or perform unauthorized actions remotely...

10CVSS8.1AI score0.01516EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/11/14 4:15 p.m.4 views

CVE-2022-45136

Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or cause the underlying database server to return malicious data. The mySQL JDBC driver in particular is known to be vulnerable to this class of attack. As a resu...

9.8CVSS7.1AI score0.01525EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.2 views

PT-2022-5463 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ODBC driver for Windows operating systems. This can be exploited by a remote attacker to execute arbitra...

10CVSS8.8AI score0.01436EPSS
SaveExploits0References11
Rows per page
Query Builder