CVE-2024-26244: Integer Underflow (Wrap or Wraparound)

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2024-26210: Heap-based Buffer Overflow

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2024-29984: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-29983: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-29982: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-28944: Numeric Truncation Error

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-28940: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-28926: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2024-28912: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation USA that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute cod...

CVE-2024-29046: Heap-based Buffer Overflow

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

PT-2024-2995

Name of the Vulnerable Software and Affected Versions Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description The issue is related to an integer overflow in the Microsoft WDAC OLE DB provider for SQL Server, which can be exploited by a remote attacker to execute...

PT-2024-3109

Name of the Vulnerable Software and Affected Versions Microsoft OLE DB Driver for SQL Server affected versions not specified Description The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

PT-2024-3065

Name of the Vulnerable Software and Affected Versions Microsoft OLE DB Driver for SQL Server affected versions not specified Description The issue is related to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This can be exploited by a remote attacker to execute...

PT-2024-3125

Name of the Vulnerable Software and Affected Versions Microsoft OLE DB Driver for SQL Server affected versions not specified Description The issue is due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server, which can be exploited by a remote attacker to execute arbitrar...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation USA that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute cod...

PT-2024-4018 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions 2022 SU5 and prior Description: The issue is related to an unspecified SQL Injection vulnerability in the Core server of Ivanti EPM, allowing an unauthenticated attacker within the same network to execute arbitrary code...

CVE-2024-3164

In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and not just to CMS Admins. Users that get site admin but not a system admin, should not have access to the System...

MikroTik RouterOS 6.40.5 - 6.44, 6.48.1 - 6.49.10 DoS Vulnerability

MikroTik RouterOS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...