Lucene search
+L

4613 matches found

Tenable Nessus
Tenable Nessus
added 2022/10/24 12:00 a.m.24 views

Microsoft SQL Server DB Compliance Checks

Binary data mssqldbcompliancecheck.nbin...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/10/24 12:00 a.m.10 views

Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.3AI score0.01248EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/10/18 9:15 p.m.10 views

CVE-2022-21625

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.30 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.4CVSS6.5AI score0.01137EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2022/10/17 10:15 p.m.33 views

CVE-2022-3158

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully...

8.8CVSS0.03413EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/17 10:15 p.m.24 views

Input validation

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully...

6.5CVSS8.9AI score0.03413EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2022/10/17 9:15 p.m.38 views

CVE-2022-38743

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database. ...

8.8CVSS0.01372EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/17 9:15 p.m.23 views

Improper access control

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database. ...

6.5CVSS9.1AI score0.01372EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/17 12:00 a.m.46 views

CVE-2022-38743

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database. ...

9.2AI score0.01372EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/10/17 12:00 a.m.9 views

PT-2022-20853 · Rockwell Automation · Factorytalk Vantagepoint

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 Description: The issue is related to an input validation vulnerability in the FactoryTalk VantagePoint SQL Server. This vulnerability occurs because the server...

8.8CVSS8.9AI score0.03413EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/10/17 12:00 a.m.46 views

CVE-2022-3158

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully...

9.2AI score0.03413EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/10/17 12:00 a.m.8 views

CVE-2022-3158

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully...

9AI score0.03413EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/10/17 12:00 a.m.17 views

CVE-2022-38743

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database. ...

9AI score0.01372EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/10/17 12:00 a.m.9 views

PT-2022-24548 · Rockwell Automation · Factorytalk Vantagepoint

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 Description: The issue is related to an improper access control vulnerability. A malicious user with read-only privileges could potentially execute SQL statemen...

8.8CVSS8.9AI score0.01372EPSS
SaveExploits0References4
CVE
CVE
added 2022/10/17 12:00 a.m.87 views

CVE-2022-38743

CVE-2022-38743 affects Rockwell Automation’s FactoryTalk VantagePoint . The issue is an improper access control vulnerability in the SQLServer account used by VantagePoint, allowing a user with read-only privileges to run SQL statements against the back-end database and potentially execute arbitr...

8.8CVSS9AI score0.01372EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2022/10/14 12:00 a.m.57 views

Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified manner.Microsoft OLE DB Provider for SQL Server is vulnerable to remote code execution, which can be exploited by attackers to The vulnerability can be...

4.6AI score0.01609EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/10/13 12:00 a.m.64 views

Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows unified access to data from a variety of sources.A remote code execution vulnerability exists in Microsoft OLE DB Provider for SQL Server, which stems from An attacker can exploit the vulnerability to cause...

4.4AI score0.01609EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2022/10/11 7:15 p.m.4 views

CVE-2022-38031

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01609EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/11 7:15 p.m.25 views

CVE-2022-38031

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS0.01609EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/11 7:15 p.m.4 views

CVE-2022-38031

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.5AI score0.01609EPSS
SaveExploits0References3Affected Software25
ATTACKERKB
ATTACKERKB
added 2022/10/11 7:15 p.m.5 views

CVE-2022-37982

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.5AI score0.01609EPSS
SaveExploits0References3Affected Software25
Rows per page
Query Builder