Security Updates for Microsoft SQL Server (April 2023)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Security Updates for Microsoft SQL Server (April 2023)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Microsoft Windows OLE 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation USA that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft Windows OLE. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Vulnerability of the Server component: The MySQL Server database management system’s Optimizer component, related to insufficient validation of input data

The vulnerability of the MySQL Server component of the database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute a DoS attack remotely...

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the SQLcmd utility in the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the SQLcmd utility in the Microsoft SQL Server database management system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created data...

PT-2023-22785 · Archery · Archery

Name of the Vulnerable Software and Affected Versions: Archery affected versions not specified Description: The Archery project contains multiple SQL injection vulnerabilities that may allow an attacker to query the connected databases. User input coming from the db name in the sql/data...

Microsoft ODBC Driver for SQL Server Installed (Windows)

Binary data microsoftodbcdriverforsqlserverwininstalled.nbin...

Microsoft OLE DB Driver for SQL Server Installed (Windows)

Binary data microsoftoledbdriverforsqlserverwininstalled.nbin...

CVE-2023-28275

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2023-28275

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2023-23384

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-23384

Microsoft SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2023-28275 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-28275 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-28275

Technical details about CVE-2023-28275 are not publicly provided in the supplied documents. Available references mention the vulnerability title, but no affected product/version, root cause, impact, or patch information in these sources. Monitor for updates.

CVE-2023-23384 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2023-23384

CVE-2023-23384 is described in the connected documents as a Microsoft SQL Server remote code execution vulnerability reachable over the network. Nessus plugin entries for April 2023 (SMB_NT_MS23_APR_MSSQL_REMOTE.NASL and SMB_NT_MS23_APR_MSSQL.NASL) confirm a remote code execution issue, with self...