Lucene search
+L

1395 matches found

Positive Technologies
Positive Technologies
•added 2024/11/12 12:00 a.m.•17 views

PT-2024-8091 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in the heap of the Microsoft SQL Server Native Client component. This can allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.01613EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/12 12:00 a.m.•24 views

Microsoft SQL Server 资源管理错误漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A resource management error vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products a...

8.8CVSS7AI score0.01613EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2024/10/08 12:00 a.m.•31 views

KLA73909 SUI vulnerabilities in Microsoft SQL Server

A spoofing user interface vulnerabilities was found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to spoof user interface. Original advisories CVE-2024-43481 CVE-2024-43612 Related products Microsoft-Power-BI CVE list CVE-2024-43481 high CVE-2024-43612 high Solution...

8.8CVSS6.9AI score0.01831EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/09/24 12:00 a.m.•20 views

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS6.1AI score0.01623EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/09/24 12:00 a.m.•19 views

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS6.5AI score0.01623EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/09/24 12:00 a.m.•13 views

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system is related to the dereferencing of an unreliable pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6.1AI score0.01623EPSS
SaveExploits0References2
CISA KEV Catalog
CISA KEV Catalog
•added 2024/09/18 12:00 a.m.•162 views

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account...

8.8CVSS7.4AI score0.99022EPSS
SaveIn wildExploits14
CNVD
CNVD
•added 2024/09/12 12:00 a.m.•21 views

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38792)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.4AI score0.01623EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/09/12 12:00 a.m.•23 views

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38797)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.4AI score0.01623EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/09/12 12:00 a.m.•79 views

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38791)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.4AI score0.01623EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/09/12 12:00 a.m.•13 views

Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2024-38789)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server, which can be exploited by attackers to obtain sensitive...

7.1CVSS6.4AI score0.0166EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/09/12 12:00 a.m.•20 views

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38793)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.4AI score0.01623EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/09/12 12:00 a.m.•122 views

Security Updates for Microsoft SQL Server (September 2024) (Remote)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

8.8CVSS6.8AI score0.02193EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
•added 2024/09/12 12:00 a.m.•204 views

Security Updates for Microsoft SQL Server Elevation of Privilege (September 2024) (Remote)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - An elevation of privilege vulnerability. An authenticated, remote attacker can exploit this issue, to gain elevated privileges. CVE-2024-37341,...

9.8CVSS5.8AI score0.01702EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2024/09/12 12:00 a.m.•38 views

Security Updates for Microsoft SQL Server (CVE-2024-43474) (September 2024) (Remote)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An information disclosure vulnerability. An authenticated, remote attacker can exploit this to disclose sensitive database and file information...

7.6CVSS5.8AI score0.0126EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/09/12 12:00 a.m.•25 views

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38795)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.4AI score0.01623EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/09/12 12:00 a.m.•24 views

Microsoft SQL Server Elevation of Privilege Vulnerability (CNVD-2024-38796)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrar...

9.8CVSS8AI score0.01444EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/09/12 12:00 a.m.•71 views

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrar...

9.8CVSS8AI score0.01363EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/09/12 12:00 a.m.•59 views

Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2024-38798)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server, which can be exploited by attackers to obtain sensitive...

7.1CVSS6.4AI score0.02193EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/09/12 12:00 a.m.•65 views

Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2024-38790)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server, which can be exploited by attackers to obtain sensitive...

7.6CVSS6.5AI score0.0126EPSS
SaveExploits0References1
Rows per page
Query Builder