HashiCorp Vault SQL注入漏洞

HashiCorp Vault is a private key access management tool from HashiCorp Inc. in the United States. A SQL injection vulnerability exists in HashiCorp Vault versions 0.8.0 through 1.13.1, which stems from the fact that when configuring the MSSQL plugin locally, certain parameters are not cleaned up...

Microsoft SQL Server 2014 / 2016 / 2017 / 2019 / 2022 Audit Logging Failure

Title: Microsoft SQL Server Password Hash Exposure Product: Database Manufacturer: Microsoft Affected Versions: 2012-2022 Risk Level: Medium CVE Reference: N/A Author of Advisory: Emad Al-Mousa Overview: SQL Server is a popular database system, and database systems are a vital backbone in IT...

How to Migrate Veeam Backup Enterprise Manager's Database from Microsoft SQL to PostgreSQL

Purpose This article documents the migration of the Veeam Backup Enterprise Manager Enterprise Manager configuration database from Microsoft SQL to PostgreSQL. Notes: The migration process is one-way only. Migration can only be performed from Microsoft SQL to PostgreSQL. Note: Starting in Veeam...

Security Updates for Microsoft SQL Server (February 2023)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-21528,...

Security Updates for Microsoft SQL Server (February 2023)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-21528,...

CVE-2023-21718

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-21713

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-21705

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-21705

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-21528

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-21528

Microsoft SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft SQL Server Integration Service VS extension Remote Code Execution Vulnerability...

Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-21713 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21568 Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

...

CVE-2023-21528 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21528

CVE-2023-21528 is a Microsoft SQL Server Remote Code Execution vulnerability. In SQL Server 2008 R2 SP3 GDR, updates described in KB5021112 fix CVE-2023-21528 (builds including SQLServer2008R2-KB5021112-x64.exe, version 10.50.6785.2). In SQL Server 2019, fixes are included in KB5021125 (build: SQ...

Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

...