130 matches found
Microsoft Office 2013 Elevation of Privilege Vulnerability (KB5002104)
This host is missing an important security update according to Microsoft KB5002104 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
CVE-2021-42293: Undefined Security Weakness
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...
Description of the security update for Office 2016: December 14, 2021 (KB5002099)
None None...
PT-2021-6179
Name of the Vulnerable Software and Affected Versions Microsoft Jet Red Database Engine and Access Connectivity Engine affected versions not specified Description The issue is related to insecure privilege management in the Microsoft Jet Red Database Engine and Access Connectivity Engine of...
KLA12389 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...
Microsoft Windows Multiple Vulnerabilities (KB5003172)
This host is missing a critical security update according to Microsoft KB5003172 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-28455
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability...
CVE-2021-28455
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability...
Remote code execution
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability...
EUVD-2021-15134
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability...
Security update 2021-05-11
...
CVE-2021-28455: Undefined Security Weakness
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability...
KLA12174 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...
KLA12175 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SharePoint c...
The vulnerability of the authentication policy for the “Red Database” database management systems, related to errors in authentication data verification, allows attackers to increase their privileges.
The vulnerability of the authentication policy for the “Red Database” database management systems is related to an error in verifying authentication data. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...
The vulnerability of the UDF subsystem of the “Red Database” and Firebird database management systems allows attackers to execute arbitrary code.
The vulnerability of the UDF subsystem in the “Red Database” and Firebird database management systems is related to errors during the execution of user-defined functions. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the “Red Database” and Firebird database management systems, related to the lack of measures taken to protect SQL query structures, allows attackers to execute arbitrary code.
The vulnerability of the "Red Database" and Firebird database management systems is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by executing incorrectly formed SQL statements...
Oracle Releases Critical Patch Update
Oracle has released its Critical Patch Update for October 2009 to address 38 vulnerabilities across several database and server products. The update contains the following security fixes: 16 for the Oracle Database 3 for the Oracle Application Server 8 for the Oracle E-Business Suite and...
SQL Injection in package DBMS_AQIN
Name SQL Injection in package DBMSAQIN CVE-2009-0992 Systems Affected Oracle 10.1.0.5 - 11.1.0.7 Severity High Risk Category SQL Injection Vendor URL http://www.oracle.com/ Author Alexander Kornbrust ak at red-database-security.com CVE CVE-2009-0992 Advisory 14 April 2009 V 1.00 Details: The...
SQL Injection in package DBMS_AQADM_SYS
Name SQL Injection in package DBMSAQADMSYS CVE-2009-0977 Systems Affected Oracle 9.2.0.8 - 10.2.0.3 Severity Medium Risk Category SQL Injection Vendor URL http://www.oracle.com/ Author Franz Hll fh at red-database-security.com CVE CVE-2009-0977 Advisory 14 April 2009 V 1.00 Details: The package...