Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-3422

Malware in sbrugna...

8.8CVSS8.6AI score0.00316EPSS
Exploits1References4
OSV
OSV
added 2024/07/09 5:15 p.m.1 views

CVE-2024-35256

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.04025EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/02/13 12:0 a.m.1 views

Microsoft WDAC OLE DB provider for SQL Security Vulnerability

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft WDAC OLE DB provider for SQL. The following products and editions are affected: Windows 10 Version 21H2...

8.8CVSS7.2AI score0.01901EPSS
Exploits0References3
OSV
OSV
added 2023/08/08 6:15 p.m.0 views

CVE-2023-36882

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.00399EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:42 a.m.1 views

SUSE CVE-2013-0287

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

4.9CVSS6.8AI score0.00464EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/02/14 8:15 p.m.0 views

CVE-2023-21685

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.3AI score0.07623EPSS
Exploits0References2Affected Software22
Positive Technologies
Positive Technologies
added 2022/09/13 12:0 a.m.1 views

PT-2022-5745 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the OLE DB driver for SQL Server on the Windows operating system. This allows a remote attacke...

10CVSS9.1AI score0.13911EPSS
Exploits0References9
UbuntuCve
UbuntuCve
added 2019/12/26 9:15 p.m.16 views

CVE-2012-3462

A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context...

8.8CVSS7.1AI score0.00316EPSS
Exploits1References2
Prion
Prion
added 2019/12/26 9:15 p.m.7 views

Design/Logic Flaw

A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context...

6.5CVSS6.9AI score0.00316EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2019/12/26 9:15 p.m.0 views

UBUNTU-CVE-2012-3462

A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context...

8.8CVSS7.2AI score0.00316EPSS
Exploits1References3
CVE
CVE
added 2019/12/26 8:14 p.m.89 views

CVE-2012-3462

SSSD 1.9.0 contains a logic flaw in its access-provider path where HBAC rule results are ignored if the access-provider also sets the user’s SELinux context. Affected component: SSSD HBAC/access-provider integration. Impact described: incorrect HBAC evaluation under scenarios where SELinux user c...

8.8CVSS8.5AI score0.00316EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2019/12/26 8:14 p.m.19 views

CVE-2012-3462

A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context...

8.8CVSS8.6AI score0.00316EPSS
Exploits1
myhack58
myhack58
added 2016/10/17 12:0 a.m.35 views

A vulnerability leak in your mailbox all the secrets-vulnerability warning-the black bar safety net

Google recently announced a 2 0 1 6 years 1 0 months of Nexus Security Bulletin, which includes a 3 6 0 mobile Guard Alpha teamAlpha Teamto submit e-mail information disclosure Vulnerability, CVE-2 0 1 6-3 9 1 8, The Google of this vulnerability is rated high risk level. The vulnerability can lea...

0.1AI score
Exploits0
OSV
OSV
added 2013/03/21 4:55 p.m.0 views

UBUNTU-CVE-2013-0287

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

4.9CVSS5.8AI score0.00464EPSS
Exploits0References3
Prion
Prion
added 2013/03/21 4:55 p.m.19 views

Design/Logic Flaw

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

4.9CVSS6.6AI score0.00464EPSS
Exploits0References16Affected Software1
Cvelist
Cvelist
added 2013/03/21 4:0 p.m.18 views

CVE-2013-0287

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

5.9AI score0.00464EPSS
Exploits0References16
Debian CVE
Debian CVE
added 2013/03/21 4:0 p.m.12 views

CVE-2013-0287

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

4.9CVSS5.3AI score0.00464EPSS
Exploits0
Oracle linux
Oracle linux
added 2013/03/19 12:0 a.m.24 views

sssd security and bug fix update

1.9.2-82.4 - Resolves: rhbz911298 - sssd: simple access provider flaw prevents intended ACL use when client to an AD provider 1.9.2-82.3 - Fix pwdexpirationwarning=0 - Resolves: rhbz914671 - pwdexpirationwarning has wrong default for Kerberos 1.9.2-82.2 - Resolves: rhbz914671 - pwdexpirationwarni...

4.9CVSS6.4AI score0.00464EPSS
Exploits0
Rows per page
Query Builder