CVE-2023-38048 A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} in EasyAppointments < 1.5.0

A BOLA vulnerability in GET, PUT, DELETE /providers/providerId allows a low privileged user to fetch, modify or delete a privileged user provider. This results in unauthorized access and unauthorized data manipulation...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...