CVE-2026-42990: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network...

CVE-2024-26214: Heap-based Buffer Overflow

Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability...

KB5036922: Windows Server 2008 R2 Security Update (April 2024)

The remote Windows host is missing security update 5036922. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Windows rndismp6.sys Remote Code Execution Vulnerability CVE-2024-26252, CVE-2024-26253 -...

KB5036925: Windows 10 LTS 1507 Security Update (April 2024)

The remote Windows host is missing security update 5036925. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168,...

Patch Tuesday - February 2023

It’s Patch Tuesday again. Microsoft is addressing fewer individual vulnerabilities this month than last, but there’s still plenty to keep admins and defenders occupied. Three zero-day vulnerabilities are vying for your attention today: a lone Microsoft Publisher vulnerability as well as a couple...

CVE-2006-2719: Undefined Security Weakness

JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HRStaff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords...