1293 matches found
CVE-2023-49572 XSS vulnerability in VX Search Enterprise
A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attacker to execute persistent XSS through /setupodbc in odbcdatasource, odbcuser and odbcpassword parameters. This vulnerability could allow an...
PT-2024-13751
Name of the Vulnerable Software and Affected Versions VX Search Enterprise version 10.2.14 Description A vulnerability has been discovered that could allow an attacker to execute persistent XSS through the "/setup odbc" API endpoint in the odbc data source, odbc user, and odbc password parameters...
SQL Injection
codeigniter/framework is vulnerable to SQL injection. The vulnerability is inadequate input validation within CodeIgniter ODBC database driver, which allows attackers to inject and execute malicious SQL queries...
GHSA-27QR-636M-WXG2 codeigniter/framework SQL injection in ODBC database driver
CodeIgniter 3.1.0 addressed a critical security issue within the ODBC database driver. This update includes crucial fixes to mitigate a SQL injection vulnerability, preventing potential exploitation by attackers. It is noteworthy that these fixes render the query builder and escape functions...
codeigniter/framework SQL injection in ODBC database driver
CodeIgniter 3.1.0 addressed a critical security issue within the ODBC database driver. This update includes crucial fixes to mitigate a SQL injection vulnerability, preventing potential exploitation by attackers. It is noteworthy that these fixes render the query builder and escape functions...
RHEL 6 : mysql-connector-odbc (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mysql-connector-odbc: An unauthenticated attacker with network access can, via multiple protocols compromise MySQL...
Debian dla-3805 : libqt5concurrent5 - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3805 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3805-1 [email protected]...
Important Photon OS Security Update - PHSA-2024-5.0-91-0256
Updates of 'unixODBC' packages of Photon OS have been released...
Oracle MySQL Connectors C++ and ODBC (Apr 2024 CPU)
The versions of MySQL Connectors installed on the remote host prior to 8.4.0, are affected by a vulnerability as referenced in the April 2024 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++ OpenSSL. Supported versions that are affected are...
Security Updates for Microsoft SQL Server ODBC Driver (April 2024)
The Microsoft SQL Server driver installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2024-29043
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
CVE-2024-28943
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
CVE-2024-28941
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
CVE-2024-28943
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
CVE-2024-28936
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
CVE-2024-28938
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
CVE-2024-28937
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
CVE-2024-28931
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...