5498 matches found
CVE-2017-11509
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement...
CVE-2017-11509: Improper Neutralization of Special Elements used in an SQL Command
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement...
PT-2018-3078
Name of the Vulnerable Software and Affected Versions Firebird SQL Server versions 2.5.7 and 3.0.2 Description The issue allows an authenticated remote attacker to execute arbitrary code by executing a malformed SQL statement. This is due to a lack of protection measures for the SQL query...
Not All Privileges are Assigned to Caller error during upgrade/install
Challenge When upgrading, the installer encounters the following error message which prevents it from proceeding: "Not all privileges or groups referenced are assigned to the caller" Affected Application Installers Veeam Backup & Replication Veeam Backup Enterprise Manager Veeam ONE Veeam Recover...
Microsoft SQL Server Default Credentials (PCI wordlist)
The SQL Server has a common password for one or more accounts. These accounts may be used to gain access to the records in the database or even allow remote command execution. TRUSTED...
A Deep Dive into Database Attacks [Part II]: Delivery and Execution of Malicious Executables through SQL commands (SQL Server)
An organization’s database servers are frequently the prime target of attackers. We recently started a new research project we named StickyDB to learn more about database hacking, primarily to understand common database attacks, tools and techniques engaged by attackers. To conduct this research,...
MS08-052: Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593) (uncredentialed check)
The remote host is running a version of Windows that has multiple buffer overflow vulnerabilities when viewing VML, EMF, GIF, WMF and BMP files that could allow an attacker to execute arbitrary code on the remote host. To exploit these flaws, an attacker would need to send a malformed image file ...
HPE iMC - dbman 'RestartDB' Remote Command Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HPE iMC dbman RestartDB Unauthenticated RCE', 'Description' = %q This module exploits a remote command execution vulnerablity in Hewlett Packard...
ADV180002: Microsoft SQL Server January 2018 Security Update (Meltdown) (Spectre)
The remote Microsoft SQL Server is missing a security update. It is, therefore, affected by a vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to disclose information via a side-channel...
Description of the security update for SQL Server 2008 R2 SP3 GDR: January 6, 2018
None None...
Description of the security update for SQL Server 2012 SP4 GDR: January 12, 2018
None None...
Description of the security update for SQL Server 2017 GDR: January 3, 2018
None None...
Description of the security update for SQL Server 2016 SP1 GDR: January 3, 2018
None None...
Description of the security update for SQL Server 2014 SP2 GDR: January 16, 2018
None None...
Description of the security update for SQL Server 2017 RTM CU3: January 3, 2018
None None...
Description of the security update for SQL Server 2012 SP3 GDR: January 16, 2018
None None...
Description of the security update for SQL Server 2008 SP4 GDR: January 6, 2018
None None...
Description of the security update for SQL Server 2014 SP2 CU10: January 16, 2018
None None...