PT-2024-3124 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Driver for SQL Server is a standalone data access application programming interface API for OLE DB. A remote code execution vulnerability exists in Microsoft OLE DB Driver for SQL Server, which can be exploited by an attacker to execute arbitrary code on the system...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Driver for SQL Server is a standalone data access application programming interface API for OLE DB. A remote code execution vulnerability exists in Microsoft OLE DB Driver for SQL Server, which can be exploited by an attacker to execute arbitrary code on the system...

CVE-2023-25493

A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and ThinkStation products that could allow a local user with elevated privileges to execute arbitrary code...

CVE-2023-25493

The CVE-2023-25493 entry describes a vulnerability in the BIOS update tool driver affecting Lenovo Desktop, Smart Edge, Smart Office, and ThinkStation products that could let a local, privileged attacker execute arbitrary code. Affected component: BIOS update tool driver; root cause details are n...

Huawei HarmonyOS Wearables 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A memory misreference vulnerability exists in the...

CVE-2024-26748 usb: cdns3: fix memory double free when handle zero packet

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if request-complete 830 spinunlock&privdev-lock; 831 usbgadgetgivebackrequest&privep-endpoint, 832 request; 833 spinlock&privdev-lock; 834 835 836 if request-buf ==...

The vulnerability of the Windows Cloud Files Mini Filter Driver allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows Cloud Files Mini Filter Driver operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ODBC driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the DCH-compatible Thunderbolt driver, related to access control deficiencies, allows a hacker to trigger a service failure.

The vulnerability of the DCH-compatible Thunderbolt driver is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: nfp: use-after-free in area_cache_get()

A vulnerability was found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in the Netronome Flow Processor NFP driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue...

CVE-2023-52618 block/rnbd-srv: Check for unlikely string overflow

In the Linux kernel, the following vulnerability has been resolved: block/rnbd-srv: Check for unlikely string overflow Since "devsearchpath" can technically be as large as PATHMAX, there was a risk of truncation when copying it and a second string into "fullpath" since it was also PATHMAX sized...

kernel: nfp: use-after-free in area_cache_get()

A vulnerability was found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in the Netronome Flow Processor NFP driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue...

Remote code execution

Microsoft ODBC Driver Remote Code Execution Vulnerability...

CVE-2023-52495

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglinkaltmode: fix port sanity check The PMIC GLINK altmode driver currently supports at most two ports. Fix the incomplete port sanity check on notifications to avoid accessing and corrupting memory beyond the port...

The vulnerability of the v4l2_async_unregister_subdev() function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the v4l2asyncunregistersubdev function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver is related to the reallocation of memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility o...

The vulnerabilities of functions map_usb_set_vbus() and omap_usb_start_srp() in the driver drivers/phy/ti/phy-omap-usb2.c of the USB device drivers for TI (Texas Instruments) operating system in Linux, which allow a hacker to cause a service failure.

The vulnerabilities of functions mapusbsetvbus and omapusbstartsrp in the driver drivers/phy/ti/phy-omap-usb2.c of the TI USB device driver for the Linux operating system are related to the assignment of a null pointer. Exploiting these vulnerabilities could allow a remote attacker to cause a...

CVE-2024-1443

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...