Lucene search
+L

947 matches found

CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•26 views

Microsoft OLE 安全漏洞

Microsoft OLE is an object-oriented technology from Microsoft Corporation USA. A security vulnerability exists in Microsoft OLE. The following products and versions are affected:Microsoft SQL Server 2019 for x64-based Systems GDR,Microsoft SQL Server 2022 for x64-based Systems GDR,Microsoft OLE D...

8.8CVSS9AI score0.02351EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•8 views

PT-2024-3130 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue is due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server, which can be exploited by a remote attacker to execute...

10CVSS9.3AI score0.02351EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2024/03/22 12:00 a.m.•14 views

The vulnerability of the OLE mechanism in the Windows operating system, related to an uncontrolled search path element, allows a perpetrator to execute arbitrary code.

The vulnerability of the OLE mechanism in the Windows operating system is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.02026EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/03/15 12:00 a.m.•15 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.01644EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/12 5:15 p.m.•4 views

CVE-2024-21435

Windows OLE Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.02026EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/12 12:00 a.m.•18 views

Microsoft OLE Security Vulnerability

Microsoft OLE is an object-oriented technology from Microsoft Corporation USA. A security vulnerability exists in Microsoft OLE. An attacker could exploit this vulnerability to remotely execute code. The following products and versions are affected: Windows 11 Version 22H2 for ARM64-based...

8.8CVSS6.8AI score0.02026EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/03/11 12:00 a.m.•11 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.01549EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/03/11 12:00 a.m.•13 views

Vulnerability of the Windows OLE operating system component, allowing a hacker to execute arbitrary code

The vulnerability of the Windows OLE operating system is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.2AI score0.01806EPSS
SaveExploits0References3
OSV
OSV
•added 2024/02/13 6:15 p.m.•8 views

CVE-2024-21369

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.01549EPSS
SaveExploits0References1
OSV
OSV
•added 2024/02/13 6:15 p.m.•5 views

CVE-2024-21372

Windows OLE Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.01806EPSS
SaveExploits0References1
OSV
OSV
•added 2024/02/13 6:15 p.m.•6 views

CVE-2024-21358

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.01768EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/12/12 6:15 p.m.•19 views

CVE-2023-36006

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.8AI score0.01891EPSS
SaveExploits0References2Affected Software24
attackerkb
attackerkb
•added 2023/12/10 7:15 p.m.•11 views

CVE-2023-50457

An issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answer, or knowledge base answers of a ticket, a user could see entries for which they lack permissions...

4.3CVSS5.8AI score0.00415EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•11 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01785EPSS
SaveExploits0References3
Wallarm Lab
Wallarm Lab
•added 2023/11/17 11:00 a.m.•65 views

What Is Multi-Homing?

Decoding the Term: Deciphering the Significance of Multi-Homing? The term multi-homing, in the realm of computer networking, finds itself surrounded by considerable confusion owing to its multifaceted technical nuances. Nevertheless, it stands as a pillar of network security and dependability...

7.2AI score
SaveExploits0
Veracode
Veracode
•added 2023/11/15 7:47 a.m.•37 views

Transaction Cross Linking

Hyperledger Fabric is vulnerable to Transaction Cross Linking. The vulnerability is due to the insecure concatenation of transactions in a block, allowing an adversary to craft a cross-linked block resulting in Transaction Cross Linking...

7.1CVSS7AI score0.00519EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2023/11/14 9:15 p.m.•54 views

CVE-2023-46132

Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linking" results in a molecule with a chemical formula that is composed of all atoms of the original two molecules. In Fabric, one can take a block of transactions...

7.1CVSS0.00519EPSS
SaveExploits1References1
Prion
Prion
•added 2023/11/14 9:15 p.m.•21 views

Cross site scripting

Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linking" results in a molecule with a chemical formula that is composed of all atoms of the original two molecules. In Fabric, one can take a block of transactions...

4CVSS7.1AI score0.00519EPSS
SaveExploits1References1Affected Software1
Github Security Blog
Github Security Blog
•added 2023/11/14 8:28 p.m.•76 views

Fabric vulnerable to crosslinking transaction attack

Short summary Combining two molecules to one another, called "cross-linking" results in a molecule with a chemical formula that is composed of all atoms of the original two molecules. In Fabric, one can take a block of transactions and cross-link the transactions in a way that alters the way the...

7.1CVSS6.6AI score0.00519EPSS
SaveExploits1References9Affected Software1
CVE
CVE
•added 2023/11/14 8:23 p.m.•104 views

CVE-2023-46132

CVE-2023-46132 describes a cross-linking attack against Hyperledger Fabric blocks where transaction encodings can be manipulated without changing the block hash. The connected documents provide concrete technical details and fixes: Fabric blocks hash transactions by naive concatenation, allowing ...

7.1CVSS6.6AI score0.00519EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder