PT-2022-37686

Уязвимость функции ERR bugcheck msg модуля err.cpp системы управления базами данных «Ред База Данных» связана с возникновением критической ошибки, которая блокировала запись в журнал перед падением сервера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, скрыть источник...

The vulnerability of the Red Database database management system lies in the improper checking of the return value of a function, which allows an attacker to trigger a service failure.

The vulnerability of the Red Database database management system is related to incorrect checking of the return value of a function. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the Red Database database management system lies in improper handling of values, which allows an attacker to trigger a service failure.

The vulnerability of the Red Database database management system is related to incorrect processing of values. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by invoking a vulnerable function...

The vulnerability of the Red Database database management system lies in the insufficient maintenance of audit logs, which allows attackers to bypass the event recording mechanism.

The vulnerability of the Red Database database management system is related to insufficient logging of audit events. Exploiting this vulnerability allows an attacker to bypass the security event logging mechanism...

The vulnerability of the Red Database database management system lies in the possibility of returning incorrect status codes, allowing attackers to deceive users.

The vulnerability of the RedBase database management system is related to the return of incorrect status codes. Exploiting this vulnerability can allow a malicious actor to deceive users by replacing the notification window...

The vulnerability of the Red Database database management system lies in the improper handling of unexpected data types, which allows attackers to trigger service failures.

The vulnerability of the Red Database database management system is related to the improper handling of unexpected data types. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending an incorrect page number to the server during replication...

The vulnerability of the Red Database database management system lies in the return of an incorrect status code, allowing an attacker to trigger a service failure.

The vulnerability of the Red Database database management system is related to the return of incorrect code states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by exhausting free space on the disk during backup operations...

The vulnerability of the Red Database database management system lies in the improper neutralization of equivalent special elements, allowing attackers to provide unreliable data during a search query.

The vulnerability of the RedBase database management system is related to the improper neutralization of equivalent special elements. Exploiting this vulnerability allows an attacker to provide unreliable data during a search using Distinguished Names, by employing special symbols...

The vulnerability of the Red Database database management system lies in improper locking of resources, which allows attackers to trigger a service failure.

The vulnerability of the Red Database database management system is related to improper locking of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by opening a specially crafted file through various processes...

The vulnerability of the “Red Database” database management system lies in the improper recording of security events, allowing attackers to conceal the source or nature of an attack.

The vulnerability of the “Red Database” database management system is related to incorrect recording of security events when attempting to create or open logs for recording registered events in the journal. Exploiting this vulnerability can allow an attacker to complicate the analysis of audit...

The vulnerability of the “Red Database” database management system lies in the improper implementation of authentication algorithms, which allows attackers to trigger a service failure.

The vulnerability of the “Red Database” database management system is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the “Red Database” database management system stems from deficiencies in audit logs, allowing attackers to conceal the source or nature of their attacks.

The vulnerability of the “Red Database” database management system is related to deficiencies in audit log management. Exploiting this vulnerability could allow a malicious actor to conceal the source or nature of an attack...

The vulnerability of the gfix utility in the “Red Database” database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the gfix utility in the “Red Database” database management system is related to deficiencies in password masking during user login when the -f command is used as an argument passed to the utility. Exploiting this vulnerability can allow an attacker, operating remotely, to gai...

PT-2022-3690

Name of the Vulnerable Software and Affected Versions Red Database versions affected versions not specified Description The issue is related to the improper neutralization of equivalent special elements in the Red Database management system. This could allow a remote attacker to provide false dat...

PT-2022-3693

Name of the Vulnerable Software and Affected Versions Red Database versions affected versions not specified Description The issue is related to the database management system returning an incorrect status code. It can be exploited by a remote attacker to cause a denial of service by exhausting fr...

PT-2022-3696

Name of the Vulnerable Software and Affected Versions Red Database versions affected versions not specified Description The issue is related to an error in processing the binary audit log in the database adapter. This could allow a remote attacker to hide the source or nature of an attack by...

PT-2022-3694

Name of the Vulnerable Software and Affected Versions Red Database versions affected versions not specified Description The issue is related to incorrect handling of an unexpected data type in the database management system. It can be exploited by a remote attacker to cause a denial of service by...

CVE-2021-42293

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...

CVE-2021-42293

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...

Microsoft Office 2016 Privilege Escalation Vulnerability (KB5002099)

This host is missing an important security update according to Microsoft KB5002099 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...