PostgreSQL privilege escalation

With SET ROLE or SET SESSION AUTHORIZATION it's possible to elevate privileges to any database acccount, including superuser or cause database engine crash...

Microsoft Jet Database Engine fails to properly validate Access database files

Overview A vulnerability in the Microsoft Jet database engine could allow a remote attacker to execute code of their choice on a vulnerable system. Description The Microsoft Jet Database Engine Jet provides data access functionality to a number of other Microsoft and many third party applications...

Dragonfly Shopping Cart Multiple vulnerabilities

Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc or even code them. Learn more at http://www.dbtech.org Severity: High Title: Dragonfly Shopping Cart Multiple vulnerabilities Date:...

CVE-2004-0197

Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query...

CVE-2004-0197

Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query...

CVE-2004-0197

CVE-2004-0197 is a buffer-overrun vulnerability in the Microsoft Jet Database Engine 4.0. The issue allows remote code execution by sending a specially crafted database query to an application that uses Jet, with the attacker gaining the same privileges as the affected process. Microsoft Security...

Microsoft Jet Database Engine buffer overflow

Request to database can cause buffer overflow...

Microsoft Security Bulletin MS04-014

Microsoft Security Bulletin MS04-014 Vulnerability in the Microsoft Jet Database Engine Could Allow Code Execution 837001 Issued: April 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® Impact of vulnerability: Remote Code Execution Maximum Severit...

MS04-014: Microsoft Hotfix (credentialed check) (837001)

The remote host has a bug in its Microsoft Jet Database Engine 837001. An attacker could exploit one of these flaws to execute arbitrary code on the remote system. To exploit this flaw, an attacker would need the ability to craft a specially malformed database query and have this engine execute i...

Microsoft Jet Database Engine database request handling buffer overflow

Overview The Microsoft Jet Database Engine Jet provides data access functionality to a number of other Microsoft and many third party applications. A buffer overflow vulnerability exists in the Jet Database Engine that could allow a remote attacker to execute code of their choosing on an affected...

Microsoft Jet Database Engine Remote Code Execution Vulnerability

Description It has been reported that Microsoft Jet Database Engine Jet is prone to a remote code execution vulnerability that that may allow remote attackers to execute arbitrary code in order to gain unauthorized access to a vulnerable system. This issue presents itself when a specially crafted...

Microsoft SQL Server 7.0/2000 JET Database Engine 4.0 - Buffer Overrun

source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying data supplied via a remote source and is due to insufficient bounds...

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying dat...

Sitespring Server DoS

Sending predefined byte sequence to TCP/2500 causes database engine to crash...

CVE-2001-0599

Sybase Adaptive Server Anywhere Database Engine (version 6.0.3.2747 and earlier, as included with Symantec Ghost 6.5) is affected. A remote attacker can trigger a denial of service by sending large (>45 KB) amounts of data to port 2638. The provided connected documents do not include further e...

CVE-2000-0981

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

CVE-2000-0981

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

CVE-2000-0323

The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability...

CVE-2000-0323

Technical details are not publicly available in the provided documents. No specifics on affected products, versions, or mitigation are disclosed. Monitor for updates.

CVE-2000-0325

The CVE-2000-0325 entry concerns the Microsoft Jet database engine, where an attacker can execute commands through a database query via the VBA Shell vulnerability. The available sources (NVD/CVE listing) describe command execution as the impact, but do not provide details on affected product ver...