4613 matches found
Microsoft Security Update Validation Report September 2024
Microsoft’s September 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing...
Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38792)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...
Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38797)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...
Security Updates for Microsoft SQL Server (CVE-2024-43474) (September 2024)
The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An information disclosure vulnerability. An authenticated, remote attacker can exploit this to disclose sensitive database and file information...
Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38791)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...
Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2024-38789)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server, which can be exploited by attackers to obtain sensitive...
Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38793)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...
Security Updates for Microsoft SQL Server Elevation of Privilege (September 2024)
The Microsoft SQL Server installation on the remote host is missing a security update. It is affected by the following vulnerabilities: - An elevation of privilege vulnerability. An authenticated, remote attacker can exploit this issue, to gain elevated privileges. CVE-2024-37341, CVE-2024-37965,...
Security Updates for Microsoft SQL Server (CVE-2024-43474) (September 2024) (Remote)
The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An information disclosure vulnerability. An authenticated, remote attacker can exploit this to disclose sensitive database and file information...
Security Updates for Microsoft SQL Server (September 2024) (Remote)
The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft SQL Server Elevation of Privilege (September 2024) (Remote)
The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - An elevation of privilege vulnerability. An authenticated, remote attacker can exploit this issue, to gain elevated privileges. CVE-2024-37341,...
Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2024-38798)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server, which can be exploited by attackers to obtain sensitive...
Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2024-38790)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server, which can be exploited by attackers to obtain sensitive...
Microsoft SQL Server Elevation of Privilege Vulnerability (CNVD-2024-38796)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrar...
Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38795)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...
Microsoft SQL Server Elevation of Privilege Vulnerability
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrar...
Security Updates for Microsoft SQL Server (September 2024)
The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Vulnerabilities fixed in Microsoft SQL Server
Microsoft has fixed vulnerabilities in SQL Server. Most of the vulnerabilities are in SQL Native Scoring and allow a malicious person to assign themselves elevated privileges, access sensitive data and execute arbitrary code within the SQL Server. Successful exploitation requires the malicious...