Lucene search
+L

597 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/13 12:00 a.m.•4 views

CVE-2022-34727: Undefined Security Weakness

Microsoft ODBC Driver Remote Code Execution Vulnerability...

8.8CVSS7.8AI score0.027EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/09/13 12:00 a.m.•23 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft ODBC Driver. The following products and versions are affected:Windows 10...

8.8CVSS8.3AI score0.027EPSS
SaveExploits0References5
hivepro
hivepro
•added 2022/05/13 2:16 a.m.•249 views

Three zero-days addressed in Microsoft’s May 2022 Patch Tuesday

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Microsoft addressed 74 vulnerabilities in their May 2022 Patch Tuesday Security Update. Three of them are zero-days, and one is being exploited in the wild. The LSA Spoofing vulnerability CVE-2022-26925 is actively exploited i...

7.2CVSS0.8AI score0.10476EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2022/05/11 5:29 a.m.•271 views

Microsoft Releases Fix for New Zero-Day with May 2022 Patch Tuesday Updates

Microsoft on Tuesday rolled out fixes for as many as 74 security vulnerabilities, including one for a zero-day bug that's being actively exploited in the wild. Of the 74 issues, seven are rated Critical, 66 are rated Important, and one is rated low in severity. Two of the flaws are listed as...

10CVSS1.2AI score0.90961EPSS
SaveExploits18
attackerkb
attackerkb
•added 2022/05/09 6:15 p.m.•12 views

CVE-2022-29971

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code...

7.8CVSS7.3AI score0.00368EPSS
SaveExploits0References3
NVD
NVD
•added 2022/05/09 6:15 p.m.•43 views

CVE-2022-29971

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code...

7.8CVSS0.00368EPSS
SaveExploits0References2
NVD
NVD
•added 2022/05/09 6:15 p.m.•41 views

CVE-2022-29972

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver 1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52 may allow a local user to execute arbitrary code...

7.8CVSS0.03685EPSS
SaveExploits0References2
Prion
Prion
•added 2022/05/09 6:15 p.m.•42 views

Design/Logic Flaw

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver 1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52 may allow a local user to execute arbitrary code...

7.2CVSS7.9AI score0.03685EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/05/09 5:15 p.m.•71 views

CVE-2022-29972

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver 1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52 may allow a local user to execute arbitrary code...

8.1AI score0.03685EPSS
SaveExploits0References2
CVE
CVE
•added 2022/05/09 5:15 p.m.•301 views

CVE-2022-29972

The CVE-2022-29972 entry concerns Magnitude Simba Amazon Redshift ODBC Driver. Affected: browser-based authentication component in the driver versions 1.4.14–1.4.21.1001 and 1.4.22–1.4.x before 1.4.52. Description states an argument injection vulnerability due to improper validation of authentica...

7.8CVSS8AI score0.03685EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/05/09 5:14 p.m.•109 views

CVE-2022-29971

CVE-2022-29971 affects the Magnitude Simba Amazon Athena ODBC Driver, versions 1.1.1 through 1.1.x before 1.1.17, with an argument injection vulnerability in the browser-based authentication component that may allow a local user to execute arbitrary code. Root cause per description: improper hand...

7.8CVSS7.8AI score0.00368EPSS
SaveExploits0References2Affected Software1
MSRC
MSRC
•added 2022/05/09 7:00 a.m.•79 views

Vulnerability mitigated in the third-party Data Connector used in Azure Synapse pipelines and Azure Data Factory (CVE-2022-29972)

Summary Microsoft recently mitigated a vulnerability in Azure Data Factory and Azure Synapse pipelines. The vulnerability was specific to the third-party Open Database Connectivity ODBC driver used to connect to Amazon Redshift in Azure Synapse pipelines and Azure Data Factory Integration Runtime...

7.8CVSS7.7AI score0.03685EPSS
SaveExploits0
MSRC
MSRC
•added 2022/05/09 7:00 a.m.•61 views

Vulnerability mitigated in the third-party Data Connector used in Azure Synapse pipelines and Azure Data Factory (CVE-2022-29972)

Summary Summary Microsoft recently mitigated a vulnerability in Azure Data Factory and Azure Synapse pipelines. The vulnerability was specific to the third-party Open Database Connectivity ODBC driver used to connect to Amazon Redshift in Azure Synapse pipelines and Azure Data Factory Integration...

2.2AI score0.03685EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2022/05/09 7:00 a.m.•170 views

Insight Software: CVE-2022-29972 Magnitude Simba Amazon Redshift ODBC Driver

...

7.8CVSS8AI score0.03685EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/05/09 12:00 a.m.•24 views

Magnitude Simba Amazon Athena ODBC Driver 参数注入漏洞

Magnitude Simba Amazon Athena ODBC Driver is an ODBC driver from Magnitude, Inc. It is used to connect real-time data from Amazon Athena directly from any application that supports ODBC connections. The Magnitude Simba Amazon Athena ODBC Driver has a parameter injection vulnerability that stems...

7.8CVSS7.3AI score0.00368EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/05/09 12:00 a.m.•4 views

PT-2022-19935

Name of the Vulnerable Software and Affected Versions Magnitude Simba Amazon Athena ODBC Driver versions 1.1.1 through 1.1.x before 1.1.17 Description An argument injection vulnerability in the browser-based authentication component may allow a local user to execute arbitrary code. Recommendation...

7.8CVSS0.00368EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/09 12:00 a.m.•8 views

CVE-2022-29971: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code...

7.8CVSS7.8AI score0.00368EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/09 12:00 a.m.•6 views

CVE-2022-29972: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver 1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52 may allow a local user to execute arbitrary code...

7.8CVSS8.2AI score0.03685EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/04/15 12:00 a.m.•4 views

PT-2022-2477

Name of the Vulnerable Software and Affected Versions Magnitude Simba Amazon Redshift ODBC Driver versions 1.4.14 through 1.4.21.1001 Magnitude Simba Amazon Redshift ODBC Driver versions 1.4.22 through 1.4.x before 1.4.52 Microsoft Azure Synapse affected versions not specified Microsoft Azure Dat...

9CVSS6.7AI score0.03685EPSS
SaveExploits0References14
Fedora
Fedora
•added 2021/02/15 1:31 a.m.•111 views

[SECURITY] Fedora 33 Update: mysql-connector-odbc-8.0.23-1.fc33

An ODBC rev 3 driver for MySQL, for use with unixODBC...

7.1CVSS6.4AI score0.10012EPSS
SaveExploits2
Rows per page
Query Builder