Lucene search
+L

261 matches found

Github Security Blog
Github Security Blog
added 2024/12/10 12:31 a.m.23 views

Drupal core contains a potential PHP Object Injection vulnerability

Drupal core contains a potential PHP Object Injection vulnerability that if combined with another exploit could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability must be present to...

9.8CVSS7.8AI score0.00956EPSS
SaveExploits0References3Affected Software3
Drupal
Drupal
added 2024/11/20 12:0 a.m.31 views

Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008

Drupal core contains a potential PHP Object Injection vulnerability that if combined with another exploit could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability must be present to...

9.8CVSS7.3AI score0.00956EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
added 2024/10/18 12:0 a.m.7 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS6.1AI score0.014EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/09 12:0 a.m.8 views

The vulnerability of the bson_strfreev() function in the libbson library’s MongoDB database management system driver allows attackers to compromise the integrity of protected information.

The vulnerability of the bsonstrfreev function in the libbson library, a MongoDB database management system driver, is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

4CVSS6.6AI score0.00392EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/10/09 12:0 a.m.17 views

The vulnerability of the MongoDB Rust Driver’s database management system driver lies in its improper handling of syntactically incorrect structures, allowing attackers to execute arbitrary commands.

The vulnerability of the MongoDB Rust Driver driver is related to the improper handling of syntaxically incorrect structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

6.4CVSS5.9AI score0.00277EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.9 views

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems arises from insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9CVSS5.6AI score0.01363EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/10 12:0 a.m.6 views

PT-2024-6286 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to potentially elevate their privileges. It is associated with the OLE DB driver for SQL Server ...

7.5CVSS8.1AI score0.02193EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:0 a.m.8 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.4AI score0.01611EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:0 a.m.8 views

The vulnerability of the OLE DB driver for SQL Server lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS6.1AI score0.01624EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:0 a.m.8 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01554EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:0 a.m.7 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01554EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:0 a.m.12 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01611EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:0 a.m.7 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01854EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:0 a.m.9 views

The vulnerability of the OLE DB driver for SQL Server, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS6.1AI score0.01554EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:0 a.m.9 views

The vulnerability of the OLE DB driver for SQL Server, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS6.2AI score0.01611EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.12 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01611EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/06 12:0 a.m.11 views

The vulnerability of the OLE DB driver for SQL Server, related to buffer overflows in the “queue”, allows attackers to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01854EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/06 12:0 a.m.10 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01611EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/06 12:0 a.m.8 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01789EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/06 12:0 a.m.8 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01854EPSS
SaveExploits0References4
Rows per page
Query Builder