Lucene search
K

163 matches found

ATTACKERKB
ATTACKERKB
added 2023/12/12 6:15 p.m.2 views

CVE-2023-36006

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.8AI score0.01891EPSS
Exploits0References2Affected Software24
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:0 a.m.1 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.018EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.2 views

The vulnerability of the WDAC OLE DB component for SQL Server on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the WDAC OLE DB component for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.01738EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/10/10 12:0 a.m.3 views

PT-2023-5971 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the OLE DB driver for Microsoft SQL Server, which can be exploited to execute arbitrary code. This allows an attacker t...

7.8CVSS9.6AI score0.00982EPSS
Exploits0References9
OSV
OSV
added 2023/08/08 6:15 p.m.1 views

CVE-2023-38169

Microsoft SQL OLE DB Remote Code Execution Vulnerability...

8.8CVSS7.3AI score0.01221EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:0 a.m.2 views

The vulnerability of the linking technology and its implementation of objects within other documents and OLE objects of the Windows operating system allows a perpetrator to perform a denial-of-service attack.

The vulnerability of the object linking and embedding technology in other documents and objects within the OLE object system of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to perform unauthorized access attemp...

7.8CVSS7.3AI score0.00595EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.4 views

The vulnerability of the OLE Automation technology in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OLE Automation technology in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

6.8CVSS7.3AI score0.0118EPSS
Exploits0References2
OSV
OSV
added 2023/07/11 6:15 p.m.1 views

CVE-2023-35323

Windows OLE Remote Code Execution Vulnerability...

7.8CVSS7.4AI score0.00595EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/07/11 6:15 p.m.2 views

CVE-2023-35323

Windows OLE Remote Code Execution Vulnerability...

7.8CVSS5.8AI score0.00595EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/20 12:0 a.m.2 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01346EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/06/16 1:15 a.m.1 views

CVE-2023-32028

Microsoft SQL OLE DB Remote Code Execution Vulnerability...

7.8CVSS5.8AI score0.00722EPSS
Exploits0References2Affected Software7
OSV
OSV
added 2023/06/16 1:15 a.m.1 views

CVE-2023-29349

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.00603EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/06/15 12:0 a.m.5 views

Microsoft OLE Automation Remote code 安全漏洞

Microsoft OLE Automation Remote code is a software application from Microsoft Corporation USA. An automation software. A security vulnerability exists in Microsoft OLE Automation Remote code, which stems from allowing remote code execution and affects the following products and versions:Microsoft...

7.8CVSS8.3AI score0.00722EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/05/09 12:0 a.m.12 views

Microsoft Windows OLE 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation USA that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft Windows OLE. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

8.1CVSS8.7AI score0.84386EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.5 views

PT-2023-2626 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows OLE technology, which can be exploited by a remote attacker to execute arbitrary code. This...

8.1CVSS9.5AI score0.84386EPSS
Exploits0References12
BDU FSTEC
BDU FSTEC
added 2023/04/25 12:0 a.m.2 views

The vulnerability of ODBC and OLE DB drivers in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of ODBC and OLE DB drivers in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.8CVSS7.7AI score0.00817EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/04/25 12:0 a.m.3 views

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.3AI score0.01463EPSS
Exploits0References2
OSV
OSV
added 2023/04/21 12:15 p.m.3 views

CVE-2023-2226

Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker to crash Velociraptor during parsing of maliciously malformed files. For this attack to succeed, the attacker needs to be able to introduce malicious files to the system a...

5.3CVSS6AI score0.00384EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/04/21 12:0 a.m.2 views

Velocidex Velociraptor 缓冲区错误漏洞

Velocidex Velociraptor is a tool from Velocidex Australia that uses Velociraptor Query Language VQL queries to gather host-based state information. A security vulnerability exists in Velocidex Velociraptor versions prior to 0.6.8 that stems from insufficient validation of the PE and OLE parsers,...

5.3CVSS5.7AI score0.00384EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/04/21 12:0 a.m.3 views

PT-2023-18387 · Unknown · Velociraptor

Name of the Vulnerable Software and Affected Versions: Velociraptor versions prior to 0.6.8 Description: The issue is caused by insufficient validation in the PE and OLE parsers, allowing an attacker to crash Velociraptor during parsing of maliciously malformed files. For this attack to succeed,...

5.3CVSS5.1AI score0.00384EPSS
Exploits0References3
Rows per page
Query Builder