Lucene search
K

1417 matches found

CNNVD
CNNVD
added 2023/04/11 12:0 a.m.2 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. The following products and versions are affected: Microsoft OLE DB Driver 18 for SQL Server,Microsoft OLE DB Driver 19 for SQL...

7.8CVSS8AI score0.01063EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.4 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. The following products and editions are affected: Microsoft SQL Server 2008 for 32-bit Systems Service Pack 4 QFE, Microsoft SQL...

7.3CVSS7.7AI score0.01532EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.3 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. The following products and versions are affected: Microsoft ODBC Driver 17 for SQL Server,Microsoft OLE DB Driver 18 for SQL...

7.8CVSS8AI score0.01792EPSS
Exploits0References3
Kaspersky
Kaspersky
added 2023/04/11 12:0 a.m.162 views

KLA48844 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SQL Server can be exploited remotely to execute arbitrary...

7.8CVSS8.6AI score0.01792EPSS
Exploits0References14
NVD
NVD
added 2023/03/30 1:15 a.m.22 views

CVE-2023-0620

HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL MSSQL Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provide...

6.7CVSS7AI score0.00153EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/03/30 12:28 a.m.7 views

CVE-2023-0620 Vault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage Backend

HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL MSSQL Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provide...

6.5CVSS6.7AI score0.00153EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/03/30 12:0 a.m.1 views

HashiCorp Vault SQL注入漏洞

HashiCorp Vault is a private key access management tool from HashiCorp Inc. in the United States. A SQL injection vulnerability exists in HashiCorp Vault versions 0.8.0 through 1.13.1, which stems from the fact that when configuring the MSSQL plugin locally, certain parameters are not cleaned up...

6.7CVSS6.6AI score0.00153EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2023/03/16 12:0 a.m.388 views

Microsoft SQL Server 2014 / 2016 / 2017 / 2019 / 2022 Audit Logging Failure

Title: Microsoft SQL Server Password Hash Exposure Product: Database Manufacturer: Microsoft Affected Versions: 2012-2022 Risk Level: Medium CVE Reference: N/A Author of Advisory: Emad Al-Mousa Overview: SQL Server is a popular database system, and database systems are a vital backbone in IT...

7.4AI score
Exploits0
Veeam
Veeam
added 2023/03/13 12:0 a.m.305 views

How to Migrate Veeam Backup Enterprise Manager's Database from Microsoft SQL to PostgreSQL

Purpose This article documents the migration of the Veeam Backup Enterprise Manager Enterprise Manager configuration database from Microsoft SQL to PostgreSQL. Notes: The migration process is one-way only. Migration can only be performed from Microsoft SQL to PostgreSQL. Note: Starting in Veeam...

7.3AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/03 12:0 a.m.1 views

The vulnerability of the Microsoft SQL Server relational database management system arises from insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft SQL Server relational database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.02059EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/01 12:0 a.m.1 views

The vulnerability of the Microsoft ODBC driver for Microsoft SQL Server allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC driver for Microsoft SQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.01189EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/02/27 12:0 a.m.1 views

The vulnerability of the Microsoft SQL Server database management system, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft SQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00166EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/02/17 12:0 a.m.842 views

Security Updates for Microsoft SQL Server (February 2023)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-21528,...

8.8CVSS8.7AI score0.02059EPSS
Exploits0References18
Tenable Nessus
Tenable Nessus
added 2023/02/17 12:0 a.m.288 views

Security Updates for Microsoft SQL Server (February 2023)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-21528,...

8.8CVSS8.7AI score0.02059EPSS
Exploits0References18
ATTACKERKB
ATTACKERKB
added 2023/02/14 8:15 p.m.3 views

CVE-2023-21713

Microsoft SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.3AI score0.02059EPSS
Exploits0References2Affected Software11
OSV
OSV
added 2023/02/14 8:15 p.m.2 views

CVE-2023-21718

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

7.8CVSS7.3AI score0.00594EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/02/14 8:15 p.m.3 views

CVE-2023-21705

Microsoft SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.3AI score0.00735EPSS
Exploits0References2Affected Software11
OSV
OSV
added 2023/02/14 8:15 p.m.1 views

CVE-2023-21705

Microsoft SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.3AI score0.00735EPSS
Exploits0References1
NVD
NVD
added 2023/02/14 8:15 p.m.14 views

CVE-2023-21528

Microsoft SQL Server Remote Code Execution Vulnerability...

7.8CVSS8.2AI score0.00166EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/02/14 8:15 p.m.3 views

CVE-2023-21528

Microsoft SQL Server Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.00166EPSS
Exploits0References2Affected Software13
Rows per page
Query Builder