CVE-2024-21428 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21414 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21415 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21415

CVE-2024-21415 covers a remote code execution flaw in the SQL Server Native Client OLE DB Provider. According to the July 2024 Patch Tuesday coverage, exploitation would allow an attacker to achieve arbitrary code execution via the client-side OLE DB driver when connecting to a SQL Server, with a...

CVE-2024-21373 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21373 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21398

CVE-2024-21398 is a Remote Code Execution vulnerability in the SQL Server Native Client OLE DB Provider (and related SQL Server OLE DB Driver for SQL Server). The CVSSv3.1 base score is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The issue can be exploited remotely if a vulnerable client connects ...

CVE-2024-21398 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21373

CVE-2024-21373 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. The affected component is the SQL Server Native Client OLE DB Provider, and the vulnerability enables code execution on the client when connecting to a vulnerable SQL Server instance, with a C...

CVE-2024-21333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21335

CVE-2024-21335 is a SQL Server Native Client OLE DB Provider remote code execution vulnerability. The connected sources confirm the flaw affects the OLE DB Provider used by SQL Server clients, enabling arbitrary code execution on a vulnerable system. Public details cite a high impact (CVSSv3 8.8)...

CVE-2024-21335 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21332

CVE-2024-21332 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. Affected component: SQL Server Native Client OLE DB Provider. Underlying issue: remote code execution (CVSS v3.1: 8.8; AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation would require network access ...

CVE-2024-38087 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-38087 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-38088

CVE-2024-38088 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. It affects Microsoft SQL Server components and is rated CVSSv3.1 8.8 (High) with network attack vector and required user interaction. The issue is being addressed via July 2024 Microsoft secur...

CVE-2024-38088 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SUSE-SU-2024:2371-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.13.0 ESR MFSA 2024-30, bsc1226316: - CVE-2024-6600: Memory corruption in WebGL API - CVE-2024-6601: Race condition in permission assignment - CVE-2024-6602: Memory corruption in NSS -...

CVE-2023-38048

A BOLA vulnerability in GET, PUT, DELETE /providers/providerId allows a low privileged user to fetch, modify or delete a privileged user provider. This results in unauthorized access and unauthorized data manipulation...

CVE-2023-38048

CVE-2023-38048 affects Easy!Appointments (older releases) via a BOLA vulnerability in GET, PUT, DELETE /providers/{providerId}, enabling a low-privileged user to fetch, modify, or delete a privileged provider account. The vulnerability is described consistently across sources as an insecure autho...