Lucene search
K

254 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/09/14 12:0 a.m.30 views

Microsoft Windows Excel Database Driver FORMULA Record Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the msexcl40.d...

6.8CVSS3.8AI score0.22757EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2018/05/31 12:0 a.m.4 views

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.3CVSS8.6AI score0.23035EPSS
Exploits0References4
CNVD
CNVD
added 2018/03/15 12:0 a.m.4 views

Micro Focus NetIQ Identity Manager JDBC Driver Information Disclosure Vulnerability

Micro Focus NetIQ Identity Manager is an identity management solution from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization.JDBC driver is one of the database connection...

9.8CVSS6.7AI score0.00852EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2017/10/10 7:0 a.m.68 views

"Unexpected error from external database driver" error when you create or open Microsoft Excel .xls files

"Unexpected error from external database driver" error when you create or open Microsoft Excel .xls files Summary This security update resolves an issue that was introduced in the October 10, 2017, update. Because of this issue, applications that are based on the Microsoft JET Database Engine...

9.3CVSS8.7AI score0.23119EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2017/07/20 12:0 a.m.6 views

The vulnerability of the DBD::mysql driver’s DBD::mysql module allows a attacker to cause a service failure or exert other effects.

The vulnerability of the DBD::mysql driver’s module is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects such as the termination of the application through MySQL server error messages or by losing...

7.5CVSS7AI score0.04629EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2017/04/20 12:0 a.m.1 views

Oracle MySQL Connectors Local Vulnerability

OracleMySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability , etc. MySQLConnectors is one of the connection to the use of MySQL application driver . Oracle MySQL Connectors has a local securi...

3.3CVSS8.4AI score0.00448EPSS
Exploits0References1
OSV
OSV
added 2017/02/17 2:59 a.m.4 views

DEBIAN-CVE-2016-1249

The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service out-of-bounds read via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression...

5.9CVSS7.2AI score0.02428EPSS
Exploits0References1
OSV
OSV
added 2017/02/17 2:59 a.m.2 views

UBUNTU-CVE-2016-1249

The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service out-of-bounds read via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression...

5.9CVSS6.9AI score0.02428EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2017/01/06 12:0 a.m.27 views

FreeBSD : codeigniter -- multiple vulnerabilities (5e439ee7-d3bd-11e6-ae1b-002590263bf5)

The CodeIgniter changelog reports : Fixed a SQL injection in the 'odbc' database driver. Updated setrealpath Path Helper function to filter-out php:// wrapper inputs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from th...

5.7AI score
Exploits0References2
OSV
OSV
added 2016/11/29 8:59 p.m.1 views

DEBIAN-CVE-2016-1251

There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x and 4.x before 4.041 when used with mysqlserverprepare=1...

8.1CVSS6.9AI score0.03118EPSS
Exploits0References1
OSV
OSV
added 2016/11/29 8:59 p.m.0 views

UBUNTU-CVE-2016-1251

There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x and 4.x before 4.041 when used with mysqlserverprepare=1...

8.1CVSS7.2AI score0.03118EPSS
Exploits0References6
CNVD
CNVD
added 2016/11/17 12:0 a.m.5 views

DBD :: mysql outer boundary read information disclosure vulnerability

DBD::mysql is a Perl5 Database Interface DBI driver for MySQL. DBD :: mysql suffers from an outer boundary read information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

5.9CVSS6.4AI score0.02428EPSS
Exploits0References1
CNVD
CNVD
added 2016/10/11 12:0 a.m.4 views

Perl DBD::mysql module buffer overflow vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall.DBD::mysql is used for one of the MySQL Perl5 Database Interface Database Interface, DBI driver module. A buffer overflow vulnerability exists in the Perl DBD::mysql module prior to version...

7.5CVSS7AI score0.03839EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2016/09/19 12:0 a.m.4 views

The vulnerability of the Debian GNU/Linux operating system and the DBD::mysql driver allows attackers to exert undefined effects.

The vulnerability of the mylogin function in the Debian GNU/Linux operating system and the DBD::mysql driver is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to have unpredictable effects by using the mysqlerrno function after the mylogin...

10CVSS7.8AI score0.04485EPSS
Exploits0References9Affected Software2
OSV
OSV
added 2016/08/19 9:59 p.m.1 views

DEBIAN-CVE-2014-9906

Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service program crash or possibly execute arbitrary code via vectors related to a lost server connection...

9.8CVSS9.5AI score0.06026EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/29 12:0 a.m.4 views

DBD::mysql Remote Code Execution Vulnerability

DBD::mysql is a Perl5 Database Interface DBI driver for MySQL. A remote code execution vulnerability exists in DBD::mysql. An attacker could use this vulnerability to execute arbitrary code in the context of an affected application, which could also result in a denial of service...

10CVSS8.4AI score0.06026EPSS
Exploits0References1
FreeBSD
FreeBSD
added 2016/07/26 12:0 a.m.20 views

codeigniter -- multiple vulnerabilities

The CodeIgniter changelog reports: Fixed an SQL injection in the ‘odbc’ database driver. Updated setrealpath Path Helper function to filter-out php:// wrapper inputs...

1.1AI score
Exploits0References1
OSV
OSV
added 2016/07/18 12:0 a.m.20 views

DSA-3621-1 mysql-connector-java - security update

Bulletin has no description...

4.9CVSS6.3AI score0.0359EPSS
Exploits0
CNVD
CNVD
added 2016/06/08 12:0 a.m.3 views

Zend Framework PDO Adapter Arbitrary Command Execution Vulnerability

Zend Framework ZF is an open source PHP5 development framework for developing web applications and services. In versions prior to Zend Framework 1.12.16, the PDO adapter does not filter null characters within SQL statements, which allows remote attackers to execute arbitrary SQL commands via a...

9.8CVSS8.2AI score0.02972EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/09/28 12:0 a.m.24 views

FreeBSD : codeigniter -- mysql database driver vulnerability (01bce4c6-6571-11e5-9909-002590263bf5)

The CodeIgniter changelog reports : Security: Removed a fallback to mysqlescapestring in the mysql database driver escapestr method when there's no active database connection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

5.4AI score
Exploits0References3
Rows per page
Query Builder