SUSE CVE-2015-8879

The odbcbindcols function in ext/odbc/phpodbc.c in PHP before 5.6.12 mishandles driver behavior for SQLWVARCHAR columns, which allows remote attackers to cause a denial of service application crash in opportunistic circumstances by leveraging use of the odbcfetcharray function to access a certain...

KLA20232 Multiple vulnerabilities in Microsoft Server Software

Remote code execution vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories CVE-2023-21707 CVE-2023-21710 CVE-2023-21529 CVE-2023-21706 Exploitation Public exploits exist for this vulnerability...

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft that is used on Microsoft Windows systems. A security vulnerability exists in SQL Server. The following products and versions are affected:Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems CU 4,Microsoft SQL Serve...

KLA20042 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof us...

November 8, 2022-KB5020693 Cumulative Update for .NET Framework 3.5 and 4.8 for Azure Stack HCI, version 22H2

None None...

KLA19264 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited...

September 13, 2022-KB5017501 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2 for x64

None None...

CVE-2022-30216 - Authentication coercion of the Windows “Server” service

In this blog, see how an off-by-one error could lead to domain controller access in Microsoft Server Service...

Microsoft Windows Multiple Vulnerabilities (KB5014738)

This host is missing an important security update according to Microsoft KB5014738 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

KLA12527 Elevation of privilege vulnerability in Microsoft Server Software

Elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-21978 Related products Microsoft-Exchange-Server CVE list CVE-2022-21978 critical KB list 5014261 5014260 Solution Install...

May 10, 2022-KB5013630 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2

None None...

Microsoft DNS Server代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Role: DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Cor...

January 11, 2022-KB5008882 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2

None None...

KLA12342 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange...

KLA12314 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

July 13, 2021-KB5003536 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2

None None...

KLA91242 ACE vulnerabilities in Microsoft Server Software

Arbitrary code execution vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Exchange Server can be exploited remote...

CVE-2020-1301 Windows SMB Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests, aka ‘Windows SMB Remote Code Execution Vulnerability’. Recent assessments: gwillcox-r7 at June 10, 2020 12:14am UTC reported: To add to @busterb’s assessment,...

MS15-022: Description of the security update for SharePoint Foundation 2013: March 10, 2015

MS15-022: Description of the security update for SharePoint Foundation 2013: March 10, 2015 Introduction This security update resolves vulnerabilities in Microsoft Office server and productivity software that could allow remote code execution if an authenticated attacker sends specially crafted...

Automatically Discover, Prioritize and Remediate Microsoft SMBv3 RCE Vulnerability (CVE-2020-0796) using Qualys VMDR

This month’s Patch Tuesday, Microsoft disclosed a critical “wormable” remote code execution RCE vulnerability in Microsoft Server Message Block 3.1.1 SMBv3 protocol. The exploitation of this vulnerability opens systems up to a 'wormable' attack, which means it would be easy to move from victim to...