Lucene search
K

4530 matches found

CNNVD
CNNVD
added 2024/04/09 12:0 a.m.4 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS8.9AI score0.02415EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.3 views

PT-2024-3173 · Microsoft · Odbc Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary code. This can affect the system...

10CVSS9.6AI score0.0233EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.2 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS8.9AI score0.0233EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.4 views

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation USA that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute cod...

8.8CVSS8.9AI score0.02294EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.2 views

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Driver for SQL Server is a standalone data access application programming interface API for OLE DB. A remote code execution vulnerability exists in Microsoft OLE DB Driver for SQL Server, which can be exploited by an attacker to execute arbitrary code on the system...

8.8CVSS8.8AI score0.02213EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.3 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS9AI score0.02399EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.2 views

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Driver for SQL Server is a standalone data access application programming interface API for OLE DB. A remote code execution vulnerability exists in Microsoft OLE DB Driver for SQL Server, which can be exploited by an attacker to execute arbitrary code on the system...

8.8CVSS8.8AI score0.02351EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.3 views

PT-2024-3123 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft OLE DB Driver for SQL Server, which can be exploited by a remote attacker to execute...

10CVSS9.3AI score0.02268EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.5 views

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

8.8CVSS8.9AI score0.02812EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.4 views

PT-2024-3128 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

10CVSS9.4AI score0.02351EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.3 views

PT-2024-3169 · Microsoft · Odbc Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The vulnerability in the Microsoft ODBC Driver for SQL Server is related to an integer overflow. It allows a remote attacker to execute arbitrary code...

10CVSS9.4AI score0.02415EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2024/04/09 12:0 a.m.76 views

KB5036922: Windows Server 2008 R2 Security Update (April 2024)

The remote Windows host is missing security update 5036922. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Windows rndismp6.sys Remote Code Execution Vulnerability CVE-2024-26252, CVE-2024-26253 -...

8.8CVSS8.5AI score0.62576EPSS
Exploits5References33
Tenable Nessus
Tenable Nessus
added 2024/04/09 12:0 a.m.103 views

KB5036925: Windows 10 LTS 1507 Security Update (April 2024)

The remote Windows host is missing security update 5036925. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168,...

8.8CVSS8.5AI score0.24294EPSS
Exploits5References56
Tenable Nessus
Tenable Nessus
added 2024/04/09 12:0 a.m.201 views

Security Updates for Microsoft Visual Studio Products (April 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - A remote code execution vulnerability exists in .NET, .NET Framework, and Visual Studio. An unauthenticated, remote attacker can exploit this to bypass...

8.8CVSS9.4AI score0.02513EPSS
Exploits0References16
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.4 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by connecting to the SQL server via OLEDB...

10CVSS8.2AI score0.02043EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:0 a.m.2 views

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01947EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:0 a.m.3 views

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.02026EPSS
Exploits0References2
Openbugbounty
Openbugbounty
added 2024/03/16 11:58 a.m.10 views

janghoon.hs.kr Cross Site Scripting vulnerability OBB-3874285

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
NVD
NVD
added 2024/03/14 3:15 a.m.11 views

CVE-2024-25649

In Delinea PAM Secret Server 11.4, it is possible for an attacker with Administrator access to the Secret Server machine to read the following data from a memory dump: the decrypted master key, database credentials when SQL Server Authentication is enabled, the encryption key of RabbitMQ queue...

6.7CVSS7AI score0.00076EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2024/03/12 6:31 p.m.47 views

Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

8.8CVSS8.5AI score0.02124EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder