CVE-2024-28906: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-26244: Integer Underflow (Wrap or Wraparound)

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2024-26210: Heap-based Buffer Overflow

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2024-29984: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-29983: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-29982: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-28944: Numeric Truncation Error

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-28940: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-28926: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-28912: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation USA that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute cod...

CVE-2024-29046: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

PT-2024-4018 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions 2022 SU5 and prior Description: The issue is related to an unspecified SQL Injection vulnerability in the Core server of Ivanti EPM, allowing an unauthenticated attacker within the same network to execute arbitrary code...

CVE-2024-3164

In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and not just to CMS Admins. Users that get site admin but not a system admin, should not have access to the System...

MikroTik RouterOS 6.40.5 - 6.44, 6.48.1 - 6.49.10 DoS Vulnerability

MikroTik RouterOS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-28335

Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is...

PYSEC-2024-49

Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is...

CVE-2024-28335

Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is...

CVE-2024-28335

Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is...