PT-2022-37686

Уязвимость функции ERR bugcheck msg модуля err.cpp системы управления базами данных «Ред База Данных» связана с возникновением критической ошибки, которая блокировала запись в журнал перед падением сервера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, скрыть источник...

Red Database Search Injection

The vulnerability of the RedBase database management system is related to the improper neutralization of equivalent special elements. Exploiting this vulnerability allows an attacker to provide unreliable data during a search using Distinguished Names, by employing special symbols...

Red Database Improper Return Value DoS

The vulnerability of the Red Database database management system is related to incorrect checking of the return value of a function. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

Red Database Resource Locking DoS

The vulnerability of the Red Database database management system is related to improper locking of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by opening a specially crafted file through various processes...

Red Database Incorrect Status Code

The vulnerability of the RedBase database management system is related to the return of incorrect status codes. Exploiting this vulnerability can allow a malicious actor to deceive users by replacing the notification window...

Red Database DoS

The vulnerability of the Red Database database management system is related to incorrect processing of values. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by invoking a vulnerable function...

Red Database Incorrect Status Code DoS

The vulnerability of the Red Database database management system is related to the return of incorrect code states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by exhausting free space on the disk during backup operations...

Red Database Audit Log Bypass

The vulnerability of the Red Database database management system is related to insufficient logging of audit events. Exploiting this vulnerability allows an attacker to bypass the security event logging mechanism...

Red Database DoS

The vulnerability of the Red Database database management system is related to the improper handling of unexpected data types. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending an incorrect page number to the server during replication...

Red Database Security Event Concealment

The vulnerability of the “Red Database” database management system is related to incorrect recording of security events when attempting to create or open logs for recording registered events in the journal. Exploiting this vulnerability can allow an attacker to complicate the analysis of audit...

Red Database Audit Log Concealment

The vulnerability of the “Red Database” database management system is related to deficiencies in audit log management. Exploiting this vulnerability could allow a malicious actor to conceal the source or nature of an attack...

gfix Red Database Unauthorized Access

The vulnerability of the gfix utility in the “Red Database” database management system is related to deficiencies in password masking during user login when the -f command is used as an argument passed to the utility. Exploiting this vulnerability can allow an attacker, operating remotely, to gai...

Red Database Authentication Failure

The vulnerability of the “Red Database” database management system is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

PT-2022-3690

Name of the Vulnerable Software and Affected Versions Red Database versions affected versions not specified Description The issue is related to the improper neutralization of equivalent special elements in the Red Database management system. This could allow a remote attacker to provide false dat...

PT-2022-3693

Name of the Vulnerable Software and Affected Versions Red Database versions affected versions not specified Description The issue is related to the database management system returning an incorrect status code. It can be exploited by a remote attacker to cause a denial of service by exhausting fr...

PT-2022-3696

Name of the Vulnerable Software and Affected Versions Red Database versions affected versions not specified Description The issue is related to an error in processing the binary audit log in the database adapter. This could allow a remote attacker to hide the source or nature of an attack by...

PT-2022-3694

Name of the Vulnerable Software and Affected Versions Red Database versions affected versions not specified Description The issue is related to incorrect handling of an unexpected data type in the database management system. It can be exploited by a remote attacker to cause a denial of service by...

CVE-2021-42293

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...

CVE-2021-42293

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...

Microsoft Office 2013 Elevation of Privilege Vulnerability (KB5002104)

This host is missing an important security update according to Microsoft KB5002104 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...