Lucene search
+L

5409 matches found

Prion
Prion
•added 2016/12/20 6:59 a.m.•18 views

Information disclosure

The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information by leveraging key guessability, aka ".NET Information Disclosure...

5CVSS7.2AI score0.20008EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2016/12/20 6:59 a.m.•44 views

CVE-2016-7270

The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information by leveraging key guessability, aka ".NET Information Disclosure...

7.5CVSS7.4AI score0.20008EPSS
SaveExploits0References3
OSV
OSV
•added 2016/12/20 6:59 a.m.•13 views

CVE-2016-7270

The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information by leveraging key guessability, aka ".NET Information Disclosure...

7.5CVSS5.9AI score0.20008EPSS
SaveExploits0References3
CVE
CVE
•added 2016/12/20 5:54 a.m.•124 views

CVE-2016-7270

CVE-2016-7270 affects the Data Provider for SQL Server in Microsoft .NET Framework 4.6.2. The vulnerability arises from mishandling a developer-supplied key, allowing remote attackers to bypass Always Encrypted and obtain sensitive cleartext data. Impact is information disclosure due to key guess...

7.5CVSS7.3AI score0.20008EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2016/12/20 5:54 a.m.•47 views

CVE-2016-7270

The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information by leveraging key guessability, aka ".NET Information Disclosure...

7.4AI score0.20008EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/12/20 12:00 a.m.•3 views

CVE-2016-7270: Undefined Security Weakness

The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information by leveraging key guessability, aka ".NET Information Disclosure...

7.5CVSS5.9AI score0.20008EPSS
SaveExploits0References2
Veeam
Veeam
•added 2016/12/19 12:00 a.m.•173 views

Upgrade Fails With “Unable to use database VeeamBackup, because it has an unsupported compatibility level”

Challenge When attempting to upgrade Veeam Backup & Replication software, the following error occurs: Unable to use database VeeamBackup, because it has an unsupported compatibility level SQL Server 2012 or later is required. Cause The database being used for the upgrade is either running on an...

7.3AI score
SaveExploits0Affected Software1
Microsoft CVE
Microsoft CVE
•added 2016/12/13 8:00 a.m.•47 views

.NET Framework Information Disclosure Vulnerability

An information disclosure vulnerability exists in Microsoft .NET 4.6.2 Framework’s Data Provider for SQL Server that could allow an attacker to access information that should be defended by the Always Encrypted feature. The vulnerability is caused when .NET Framework improperly uses a...

7.5CVSS7.3AI score0.20008EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2016/12/13 12:00 a.m.•252 views

KLA10925 Information Disclosure vulnerability in Microsoft .NET Framework 4.6.2

Mishandling of a developer-supplied key was found in Microsoft .NET 4.6.2 Framework’s Data Provider for SQL Server. By exploiting this vulnerability malicious users can obtain sensitive cleartext information. This vulnerability can be exploited remotely via leveraging key guessability. Original...

7.5CVSS7.9AI score0.20008EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2016/12/13 12:00 a.m.•275 views

MS16-155: Security Update for .NET Framework (3205640)

The remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability in the .NET Framework Data Provider for SQL Server due to improper handling of developer-supplied keys. An unauthenticated, remote attacker can exploit this to disclose...

7.5CVSS7.6AI score0.20008EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•44 views

Microsoft SQL Server 2012 SP1 11.0.3300.0 through 11.0.3492.0 Multiple Vulnerabilities (3045317)

Binary data 9819.prm...

8.5CVSS6.8AI score0.185EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•191 views

Microsoft SQL Server 2008 R2 SP3 10.50.6500.0 through 10.50.6525.0 Multiple Vulnerabilities (3045314)

Binary data 9818.prm...

8.5CVSS6.8AI score0.185EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•255 views

Microsoft SQL Server 2014 SP1 12.0.4100.0 through 12.0.4231.0 Privilege Escalation (3194720)

Binary data 9812.prm...

8.8CVSS7.3AI score0.11994EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•43 views

Microsoft SQL Server 2008 SP4 10.0.6500.0 through 10.0.6526.0 Multiple Vulnerabilities (3045308)

Binary data 9816.prm...

8.5CVSS6.8AI score0.185EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•73 views

Microsoft SQL Server 2016 13.0.1605.0 through 13.0.1721.0 Multiple Privilege Escalation (3194716)

Binary data 9814.prm...

8.8CVSS7.6AI score0.17568EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•101 views

Microsoft SQL Server 2008 SP3 10.0.5500.0 through 10.0.5520.0 Multiple Vulnerabilities (3045305)

Binary data 9815.prm...

8.5CVSS6.8AI score0.185EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•191 views

Microsoft SQL Server 2012 SP2 11.0.5058.0 through 11.0.5387.0 Multiple Privilege Escalation (3194719)

Binary data 9810.prm...

8.8CVSS9AI score0.11895EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•269 views

Microsoft SQL Server 2012 SP3 11.0.6020.0 through 11.0.6247.0 Multiple Privilege Escalation (3194721)

Binary data 9811.prm...

8.8CVSS9AI score0.11895EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•156 views

Microsoft SQL Server 2014 SP2 12.0.5000.0 through 12.0.5202.0 Privilege Escalation (3194714)

Binary data 9813.prm...

8.8CVSS7.3AI score0.11994EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•50 views

Microsoft SQL Server 2012 SP2 11.0.5500.0 through 11.0.5592.0 Multiple Vulnerabilities (3045319)

Binary data 9827.prm...

8.5CVSS6.8AI score0.185EPSS
SaveExploits0References4
Rows per page
Query Builder