1447 matches found
CVE-2023-47800
CVE-2023-47800 affects Natus NeuroWorks and SleepWorks prior to version 8.4 GMA3. The root cause is a default password (xltek) on the Microsoft SQL Server service account sa, enabling a threat actor to perform remote code execution, data exfiltration, or data/tampering and disruption of MSSQL ser...
PT-2023-30615 · Natus +1 · Natus Neuroworks +2
Name of the Vulnerable Software and Affected Versions: Natus NeuroWorks and SleepWorks versions prior to 8.4 GMA3 Description: The issue arises from the use of a default password xltek for the Microsoft SQL Server service sa account in Natus NeuroWorks and SleepWorks. This allows a threat actor t...
The vulnerability of the Microsoft SQL Server database management system, related to insufficient validation of input data, allows a hacker to trigger a service failure.
The vulnerability of the Microsoft SQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...
Security Updates for Microsoft SQL Server ODBC Driver (October 2023)
The Microsoft SQL Server ODBC Driver installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities. - An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-36417, CVE-2023-36420,...
Security Updates for Microsoft SQL Server OLE DB Driver (October 2023)
The Microsoft SQL Server OLE DB Driver installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities. - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2023-36728
Microsoft SQL Server Denial of Service Vulnerability...
CVE-2023-36417
Microsoft SQL OLE DB Remote Code Execution Vulnerability...
Remote code execution
Microsoft SQL OLE DB Remote Code Execution Vulnerability...
Denial of service
Microsoft SQL Server Denial of Service Vulnerability...
CVE-2023-36417 Microsoft SQL OLE DB Remote Code Execution Vulnerability
...
CVE-2023-36417 Microsoft SQL OLE DB Remote Code Execution Vulnerability
...
CVE-2023-36728 Microsoft SQL Server Denial of Service Vulnerability
...
Microsoft ODBC Driver Security Vulnerability
Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to remotely execute code...
PT-2023-5971 · Microsoft · Sql Server
Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the OLE DB driver for Microsoft SQL Server, which can be exploited to execute arbitrary code. This allows an attacker t...
KLA61355 Multiple vulnerabilities in Microsoft SQL Server
Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft ODBC Driver for SQL Server can be...
Threat Actors Targeting Microsoft SQL Servers to Deploy FreeWorld Ransomware
Threat actors are exploiting poorly secured Microsoft SQL MS SQL servers to deliver Cobalt Strike and a ransomware strain called FreeWorld. Cybersecurity firm Securonix, which has dubbed the campaign DBJAMMER, said it stands out for the way the toolset and infrastructure is employed. "Some of the...
Security Updates for Microsoft SQL Server ODBC Driver (August 2023)
The Microsoft SQL Server driver installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker could exploit the vulnerability by tricking an authenticated user into attempting to connec...
CVE-2023-38169
Microsoft SQL OLE DB Remote Code Execution Vulnerability...