CVE-2018-8527

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, SQ...

CVE-2018-8533

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, S...

Information disclosure

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, SQ...

CVE-2018-8533: Improper Restriction of XML External Entity Reference

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, S...

CVE-2018-8532: Improper Restriction of XML External Entity Reference

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing a malicious XMLA file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, S...

Microsoft SQL Server Management Studio Information Disclosure Vulnerability (CNVD-2019-01572)

Microsoft SQL Server Management Studio is an integrated environment for managing multiple SQL infrastructures from Microsoft. The product is mainly used for setting up, monitoring and managing SQL programs. An information disclosure vulnerability exists in Microsoft SQL Server Management Studio...

Microsoft SQL Server Management Studio Information Disclosure Vulnerability (CNVD-2018-21210)

Microsoft SQL Server Management Studio is an integrated environment for managing multiple SQL infrastructures from Microsoft. The product is mainly used for setting up, monitoring and managing SQL programs. An information disclosure vulnerability exists in Microsoft SQL Server Management Studio...

CVE-2018-8527: Improper Restriction of XML External Entity Reference

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, SQ...

Microsoft SQL Server Management Studio regsrvr File XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft SQL Server Management Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

SQL Server Management Studio Information Disclosure Vulnerability

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing a malicious XEL file containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity declaration...

Microsoft SQL Server Management Studio CVE-2018-8532 Information Disclosure Vulnerability

Description Microsoft SQL Server Management Studio is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SQL Server Management Studio 17.9 Microsoft SQL Server...

PT-2018-2122

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Management Studio affected versions not specified Description The issue is related to errors in XML link restrictions on external objects XXE in Microsoft SQL Server Management Studio. Exploitation of this issue may allow ...

PT-2018-2125

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Management Studio affected versions not specified Description The issue is related to XML External Entity XXE errors, which can allow a remote attacker to disclose protected information using a specially crafted file...

PT-2018-1727

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Management Studio affected versions not specified Description: The issue is related to insufficient restriction of XML external entity XXE references in Microsoft SQL Server Management Studio. This could allow a remote...

HPE Integrated Lights-Out 5 Arbitrary Code Execution Vulnerability

HPE Integrated Lights-Out iLO 3, 4, and 5 are all embedded server management technologies from Hewlett Packard Enterprise HPE that monitor and maintain server operations, remotely control servers, and more through an integrated remote management port. A security vulnerability exists in HPE iLO 3,...

Dell EMC iDRAC6 Monolithic and Modular Command Injection Vulnerabilities

Dell EMC iDRAC6 Monolithic and Modular are both system management solutions containing hardware and software from Dell USA. The solutions provide remote management, crash system recovery and power control for Dell PowerEdge systems. A command injection vulnerability exists in the web-based...

Microsoft Windows: Remote server management (RM Service)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmservservermanagement.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Allow remote server management through WinRM Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.ne...

The vulnerability of the HPE Integrated Lights-out 4 (iLO 4) server management tool lies in its authentication procedures’ flaws, which allow attackers to bypass the authentication process and execute arbitrary code.

The vulnerability of the HPE Integrated Lights-out 4 iLO 4 server management tool is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and execute arbitrary code...

Ajenti Arbitrary Plugin Download Vulnerability

Ajenti is a Web-based open source server management system developed by Belarusian software developer Eugene Pankov. The system comes with a variety of pre-built plug-ins for configuring and monitoring server software and services such as Apache, scheduled tasks Cron and so on. A security...

Cross site request forgery (csrf)

Ajenti version version 2 contains a Cross ite Request Forgery CSRF vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server . This attack appear to be exploitable via Being a CSRF, victim interaction is needed, when the...