55 matches found
CVE-2023-28275: Heap-based Buffer Overflow
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-21686: Integer Overflow or Wraparound
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-21799: Heap-based Buffer Overflow
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-21685: Improper Input Validation
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-21681: Integer Underflow (Wrap or Wraparound)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2022-37982: Undefined Security Weakness
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2022-38031: Undefined Security Weakness
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2022-34731: Undefined Security Weakness
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2022-35834: Undefined Security Weakness
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2022-34733: Undefined Security Weakness
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2022-35835: Undefined Security Weakness
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2022-35840: Undefined Security Weakness
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2022-35836: Undefined Security Weakness
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2016-7270: Undefined Security Weakness
The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information by leveraging key guessability, aka ".NET Information Disclosure...
PT-2016-7281
Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework version 4.6.2 Description An information disclosure issue exists due to the improper handling of a developer-supplied key by the Data Provider for SQL Server in Microsoft .NET Framework. This allows remote attackers to...