Lucene search
+L

121 matches found

OSV
OSV
added 2025/09/10 7:15 a.m.6 views

UBUNTU-CVE-2025-9943

An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...

9.1CVSS6AI score0.00394EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/09/10 6:45 a.m.6 views

CVE-2025-9943

An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...

9.1CVSS6AI score0.00394EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/09/10 6:45 a.m.18 views

CVE-2025-9943 Unauthenticated SQL Injection Vulnerability in Shibboleth Service Provider

An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...

0.00394EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-26651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The funcodbc module provides possibly inadequate escaping...

9.8CVSS8.7AI score0.06976EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/15 12:0 a.m.10 views

PT-2024-40014 · Unknown · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter version 3.1.0 and earlier Description: A critical security issue was found in the ODBC database driver, which could lead to SQL injection. This issue has been mitigated with crucial fixes in the update. The query builder and escap...

10CVSS8.2AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/05/02 12:0 a.m.11 views

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library arises from the use of memory after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC Driver for SQL Server dynamic loading library is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

10CVSS8.2AI score0.02351EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/02 12:0 a.m.11 views

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC Driver for SQL Server dynamic sorting library is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.2AI score0.02356EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/05/02 12:0 a.m.11 views

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library, related to reading data beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC Driver for SQL Server dynamic loading library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

10CVSS8.4AI score0.0233EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/05/02 12:0 a.m.17 views

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC Driver for SQL Server dynamic layout library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

10CVSS8.5AI score0.02351EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/04/24 12:0 a.m.12 views

The vulnerability of the ODBC driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ODBC driver for SQL Server on Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the user is connected to the malicious SQL server via ODBC, and the malicious actor send...

10CVSS8.2AI score0.02399EPSS
SaveExploits0References2Affected Software3
NCSC
NCSC
added 2024/04/10 12:0 a.m.9 views

Vulnerabilities fixed in Micorosft SQL Server

Microsoft has fixed vulnerabilities in SQL Server. The vulnerabilities are located in the various ODBC and OLE DB drivers and allow a malicious party to execute arbitrary code execute application privileges, potentially gaining access gain access to sensitive data. Successful abuse requires the...

8.8CVSS7.7AI score0.02812EPSS
SaveExploits0
OSV
OSV
added 2024/04/09 5:15 p.m.7 views

CVE-2024-28935

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.02356EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.10 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS9AI score0.02356EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.19 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS9AI score0.02415EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.7 views

PT-2024-3173 · Microsoft · Odbc Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary code. This can affect the system...

10CVSS9.6AI score0.0233EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.26 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft ODBC Driver. The following products and editions are...

8.8CVSS8.9AI score0.02351EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.21 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS8.9AI score0.02259EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.17 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS8.9AI score0.0233EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.6 views

PT-2024-3175 · Microsoft · Odbc Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory in the Microsoft ODBC Driver for SQL Server. This can be exploited by a remote attacker to execute...

10CVSS9.5AI score0.02259EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:0 a.m.10 views

The vulnerability of the ODBC driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.02026EPSS
SaveExploits0References2
Rows per page
Query Builder