Lucene search
+L

3854 matches found

osv_cve
osv_cve
•added 2024/04/09 5:15 p.m.•14 views

CVE-2024-28944

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.02351EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•9 views

PT-2024-3170

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to a use-after-free memory vulnerability in the Microsoft ODBC Driver for SQL Server. This vulnerability can be exploited by a remote...

10CVSS9.2AI score0.02351EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•29 views

Microsoft ODBC Driver security vulnerabilities

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS8.9AI score0.02415EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•37 views

Microsoft ODBC Driver security vulnerabilities

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS8.9AI score0.02259EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•17 views

PT-2024-3018 · Microsoft · Wdac Ole Db Provider For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue is related to a buffer overflow in the heap, allowing remote attackers to execute arbitrary code and affect the system. This can potentially...

10CVSS9.5AI score0.01962EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•7 views

PT-2024-3117 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

10CVSS9.4AI score0.02415EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•14 views

PT-2024-3127 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

10CVSS9.4AI score0.0242EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•17 views

PT-2024-3113 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

10CVSS9.4AI score0.02351EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2024/03/22 12:00 a.m.•22 views

Microsoft SQL Server Code Execution

The vulnerability of the Microsoft SQL Server database management system for the Django web development framework is related to the lack of measures taken to protect the SQL query structure when processing the unsanitized parameter. Exploiting this vulnerability allows a malicious actor to execut...

9CVSS8.2AI score0.02106EPSS
SaveExploits0References8Affected Software1
osv_cve
osv_cve
•added 2024/03/12 5:15 p.m.•13 views

CVE-2024-21444

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01947EPSS
SaveExploits0References1
NCSC
NCSC
•added 2024/03/12 12:00 a.m.•17 views

Vulnerability fixed in Microsoft SQL Server

Microsoft has fixed and vulnerability in SQL Server. The vulnerability is located in the Django backend and allows a malicious party to be able to use the client application of the victim to execute an SQL injection and thus execute arbitrary code execute arbitrary code with the victim's privileg...

8.8CVSS8.2AI score0.02106EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/03/11 12:00 a.m.•19 views

WDAC OLE DB Driver Code Execution

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.01768EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2024/03/05 6:22 p.m.•11 views

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2024)

A flaw was found in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized...

4.9CVSS7AI score0.00887EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/03/05 6:22 p.m.•18 views

mysql: InnoDB unspecified vulnerability (CPU Jul 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

4.9CVSS7.3AI score0.01319EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/03/05 6:22 p.m.•12 views

mysql: Server: UDF unspecified vulnerability (CPU Oct 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: UDF. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

4.9CVSS5.7AI score0.01103EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2024/02/26 2:24 p.m.•23 views

Security Bulletin: IBM OpenPages is affected by multiple security vulnerabilities of DB2 Database Server

Summary IBM® Db2® Database Server is shipped as a supporting program of IBM OpenPages. Information about security vulnerabilities affecting IBM Db2 Database Server has been published in multiple security bulletins. Vulnerability Details Refer to the security bulletins listed in the...

6.8AI score
SaveExploits0Affected Software1
CNVD
CNVD
•added 2024/02/22 12:00 a.m.•66 views

Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11158)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.0.35 and earlier, version 8.2.0 and earlier. An attacker can exploit this...

5.3CVSS6.5AI score0.01023EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/02/22 12:00 a.m.•90 views

Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11155)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.2.0 and earlier versions. An attacker can exploit this vulnerability to...

6.5CVSS6.5AI score0.00891EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/17 2:15 a.m.•50 views

CVE-2024-20903

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.21 and 21.3-21.12. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise...

6.5CVSS6AI score0.00416EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/17 12:00 a.m.•9 views

CVE-2024-20903: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.21 and 21.3-21.12. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise...

6.5CVSS5.7AI score0.00416EPSS
SaveExploits0References1
Rows per page
Query Builder