Lucene search
+L

1309 matches found

CNNVD
CNNVD
added 2023/10/10 12:0 a.m.62 views

Microsoft ODBC Driver Security Vulnerability

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to remotely execute code...

7.8CVSS7.3AI score0.01056EPSS
SaveExploits0References4
Kaspersky
Kaspersky
added 2023/10/10 12:0 a.m.103 views

KLA61355 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft ODBC Driver for SQL Server can be...

7.8CVSS8.2AI score0.01056EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2023/08/21 12:0 a.m.126 views

Security Updates for Microsoft SQL Server ODBC Driver (August 2023)

The Microsoft SQL Server driver installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker could exploit the vulnerability by tricking an authenticated user into attempting to connec...

8.8CVSS8.9AI score0.01221EPSS
SaveExploits0References4
Kaspersky
Kaspersky
added 2023/08/08 12:0 a.m.42 views

KLA51718 Multiple vulnerabilities in Microsoft SQL Server

A remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2023-38169 Related products Microsoft-SQL-Server Microsoft-Windows CVE list CVE-2023-38169 critical KB list 5026806 5025808...

8.8CVSS9.6AI score0.01221EPSS
SaveExploits0References6
Broadcom
Broadcom
added 2023/07/27 12:0 a.m.70 views

CVE-2023-34362 - a SQL injection vulnerability has been found in the MOVEit Transfer web application.

In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...

9.8CVSS9.8AI score0.99934EPSS
SaveExploits15
Tenable Nessus
Tenable Nessus
added 2023/07/26 12:0 a.m.218 views

Security Updates for Microsoft SQL Server OLE DB Driver (June 2023)

The Microsoft SQL Server driver installation on the remote host is missing a security update. It is, therefore, affected by remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for...

8.8CVSS8.8AI score0.01221EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/07/26 12:0 a.m.239 views

Security Updates for Microsoft SQL Server ODBC Driver (June 2023)

The Microsoft SQL Server driver installation on the remote host is missing a security update. It is, therefore, affected by remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for...

7.8CVSS8.5AI score0.00722EPSS
SaveExploits0References6
Hewlett-Packard
Hewlett-Packard
added 2023/07/20 12:0 a.m.32 views

HP Security Manager and Web Jetadmin - Potential remote code execution

HP Security Manager and Web Jetadmin may potentially be vulnerable to Remote Code Execution when using certain versions of Microsoft SQL Server Express. For additional information regarding the potential vulnerability and Microsoft SQL security patches for existing installations, please visit the...

8.8CVSS8.2AI score0.06153EPSS
SaveExploits0
Veeam
Veeam
added 2023/07/14 12:0 a.m.51 views

Build Numbers and Versions of Veeam Plug-ins for Enterprise Applications

Plug-In Download The latest version of all Plug-Ins for Enterprise Applications can be found at the bottom of the My Products page within the My Portal, in the Application Plug-Ins under Additional downloads. View by Plug-in Build Number View by Veeam Backup & Replication Release This table lists...

5.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/06 12:0 a.m.11 views

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00603EPSS
SaveExploits0References2Affected Software1
0day.today
0day.today
added 2023/06/26 12:0 a.m.527 views

MOVEit SQL Injection Exploit

This Metasploit module exploits an SQL injection vulnerability in the MOVEit Transfer web application that allows an unauthenticated attacker to gain access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server, or Azure SQL, an attacker can levera...

9.8CVSS8.2AI score0.99934EPSS
SaveExploits15
Kaspersky
Kaspersky
added 2023/06/15 12:0 a.m.73 views

KLA50361 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft ODBC Driver for SQL Server can be exploited remotely to...

7.8CVSS8.6AI score0.00722EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2023/06/15 12:0 a.m.7 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft ODBC Driver that stems from the presence of a remote code execution...

7.8CVSS8.2AI score0.00603EPSS
SaveExploits0References4
CISA KEV Catalog
CISA KEV Catalog
added 2023/06/02 12:0 a.m.135 views

Progress MOVEit Transfer SQL Injection Vulnerability

Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server, or Azure SQL, an attacker may be able to infer informati...

9.8CVSS8.1AI score0.99934EPSS
SaveIn wildExploits15
VulnCheck KEV
VulnCheck KEV
added 2023/06/01 12:0 a.m.2 views

VulnCheck KEV: CVE-2023-34362

Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server, or Azure SQL, an attacker may be able to infer...

9.8CVSS7.5AI score0.99934EPSS
SaveExploits15References1
Tenable Nessus
Tenable Nessus
added 2023/05/12 12:0 a.m.84 views

Security Updates for Microsoft SQL Server ODBC Driver (April 2023)

The Microsoft SQL Server driver installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

7.8CVSS8.8AI score0.00817EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2023/05/12 12:0 a.m.156 views

Security Updates for Microsoft SQL Server (April 2023)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

7.3CVSS8.8AI score0.00871EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2023/05/12 12:0 a.m.123 views

Security Updates for Microsoft SQL Server OLE DB Driver (April 2023)

The Microsoft SQL Server driver installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

7.8CVSS8.8AI score0.00817EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2023/05/12 12:0 a.m.514 views

Security Updates for Microsoft SQL Server (April 2023)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

7.3CVSS8.8AI score0.00871EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.10 views

The vulnerability of the SQLcmd utility in the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the SQLcmd utility in the Microsoft SQL Server database management system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created data...

7.5CVSS8AI score0.00871EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder