7508 matches found
Native Client Microsoft SQL Server Code Execution
The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
IBM Concert Access Control Error Vulnerability
IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. An Access Control Error vulnerability exists in versions prior to IBM Concert 1.0.3 that stems from improper access control and can be exploited by an...
Malicious code in camera-kit-react-native-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dd6f549d4d0f68b91fde2f49d2d3d424d09a744224c5b2f97c9c7fc901f51b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10844 Malicious code in camera-kit-react-native-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dd6f549d4d0f68b91fde2f49d2d3d424d09a744224c5b2f97c9c7fc901f51b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-11179: Improper Neutralization of Special Elements used in an SQL Command
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to SQL Injection via the 'statustype' parameter in all versions up to, and including, 4.15.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
net.open-esb.runtime.standalone:openesb-standalone-bootstrap (3.0.0), net.open-esb.runtime.standalone:openesb-standalone-container (3.0.0) +7 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.50)
org.apache.tomcat:tomcat-catalina MAVEN version 7.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.open-esb.runtime.standalone:openesb-standalone-bootstrap 3.0.0 -...
Malicious code in rn-native-portals (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cc76bce72b94e6ae0b2f629d3fc88141eeebe2e6d7f59c886a7ca7b8ec6d078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Microsoft SQL Server Native Client Remote Code Execution Vulnerability (CNVD-2025-02468)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server Native Client, which can be exploited by an attacker to...
Microsoft SQL Server Native Client Remote Code Execution Vulnerability (CNVD-2025-02462)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server Native Client, which can be exploited by an attacker to...
Native Client Microsoft SQL Server Code Execution
The vulnerability of Native Client components in the Microsoft SQL Server database management system is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Native Client Microsoft SQL Server Code Execution
The vulnerability of Native Client components in Microsoft SQL Server database management systems relates to the use of memory after it is released. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Native Client Microsoft SQL Server Code Execution
The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft SQL Server Native Client Remote Code Execution Vulnerability
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server Native Client, which can be exploited by an attacker to...
Microsoft SQL Server Native Client Remote Code Execution Vulnerability (CNVD-2025-02467)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server Native Client, which can be exploited by an attacker to...
Microsoft SQL Server Native Client Remote Code Execution Vulnerability (CNVD-2025-02465)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server Native Client, which can be exploited by an attacker to...
Microsoft SQL Server Native Client Remote Code Execution Vulnerability (CNVD-2025-02466)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server Native Client, which can be exploited by an attacker to...
Microsoft SQL Server Native Client Remote Code Execution Vulnerability (CNVD-2025-02464)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server Native Client, which can be exploited by an attacker to...
Malware in appdynamics-native
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Fedora 41 : rust-hyper-rustls / rust-reqwest / rust-rustls-native-certs / etc (2024-347164df1c)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-347164df1c advisory. - Update the hyper-rustls crate to version 0.27.3. - Update the reqwest crate to version 0.12.8. - Update the rustls-native-certs crate to version 0.8.0 and...
Fedora 38 : emacs (2022-cbc71cc4fe)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-cbc71cc4fe advisory. Automatic update for emacs-28.2-1.fc38. Changelog Tue Nov 1 2022 Dan ermk - 1:28.2-1 - New upstream release 28.2, fixes rhbz2126048 - Add patch to fix...