Lucene search
K

4530 matches found

BDU FSTEC
BDU FSTEC
added 2024/09/24 12:0 a.m.4 views

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system is related to the dereferencing of an unreliable pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6.1AI score0.01623EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:0 a.m.5 views

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system is related to the dereferencing of an unreliable pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6.1AI score0.01623EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.3 views

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems arises from insufficient validation of input data, allowing attackers to disclose sensitive information.

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to disclose sensitive information remotely...

8CVSS5.5AI score0.0126EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.4 views

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems arises from insufficient validation of input data, allowing attackers to exploit their privileges.

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

9CVSS5.6AI score0.01702EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.3 views

The vulnerability of the OLE DB driver for SQL Server Windows operating systems arises from reading data beyond the buffer in memory, allowing an attacker to exploit their privileges.

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

7.5CVSS5.8AI score0.02193EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.5 views

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems arises from operations that go beyond the buffer boundaries in memory. This allows attackers to exploit the protected information or cause service failures.

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

7.5CVSS5.7AI score0.0166EPSS
Exploits0References2
CISA KEV Catalog
CISA KEV Catalog
added 2024/09/18 12:0 a.m.34 views

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account...

9.8CVSS7.4AI score0.99046EPSS
In wildExploits14
Packet Storm
Packet Storm
added 2024/09/17 12:0 a.m.194 views

Microsoft SQL Server Masked Data Exposure

Title: SQL Server Masked Data Exposure Through Brute Force Attack Product: Database Manufacturer: Microsoft Affected Versions: SQL Server 2014, 2016,2017,2019,2022 Tested Versions: SQL Server 2014, 2016,2017,2019,2022 Risk Level: Low Security Feature: Dynamic Data Masking Author of Advisory: Emad...

7.4AI score
Exploits0
Citrix
Citrix
added 2024/09/13 12:0 a.m.7 views

Microsoft Security Update Validation Report September 2024

Microsoft’s September 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing...

7AI score
Exploits0
CNVD
CNVD
added 2024/09/12 12:0 a.m.6 views

Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2024-38789)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server, which can be exploited by attackers to obtain sensitive...

7.1CVSS6.4AI score0.0166EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/12 12:0 a.m.10 views

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38797)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.4AI score0.01623EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/12 12:0 a.m.8 views

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38795)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.4AI score0.01623EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/12 12:0 a.m.9 views

Microsoft SQL Server Elevation of Privilege Vulnerability (CNVD-2024-38796)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrar...

9.8CVSS8AI score0.01456EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/12 12:0 a.m.11 views

Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2024-38790)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server, which can be exploited by attackers to obtain sensitive...

7.6CVSS6.5AI score0.0126EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/12 12:0 a.m.8 views

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38791)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.4AI score0.01623EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/12 12:0 a.m.9 views

Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2024-38798)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server, which can be exploited by attackers to obtain sensitive...

7.1CVSS6.4AI score0.02193EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/12 12:0 a.m.8 views

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38792)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.4AI score0.01623EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/12 12:0 a.m.12 views

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrar...

9.8CVSS8AI score0.01363EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/12 12:0 a.m.12 views

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38793)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.4AI score0.01623EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/09/12 12:0 a.m.105 views

Security Updates for Microsoft SQL Server (September 2024) (Remote)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

8.8CVSS6.8AI score0.02193EPSS
Exploits0References15
Rows per page
Query Builder