Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-37310 State: PUBLISHED Published: 2024-07-10T19:39:36.860Z Last Updated: 2024-12-16T00:57:23.275Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: EVerest Products: everest-core Problem Types: CWE-122, CWE-190 Description: EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and 2024.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/EVerest/everest-core/security/advisories/GHSA-8g9q-7qr9-vc96 - http
Program Container: References: - https://github.com/EVerest/everest-core/security/advisories/GHSA-8g9q-7qr9-vc96 - https://github.com/EVerest/everest-core/commit/f73620c4c0f626e1097068a47e10cc27b369ad8e - https://github.com/EVerest/everest-core/releases/tag/2024.3.1 - https://github.com/EVerest/everest-core/releases/tag/2024.6.0
CVE ID: CVE-2024-37311 State: PUBLISHED Published: 2024-08-23T14:26:45.894Z Last Updated: 2024-08-23T16:12:01.820Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: CollaboraOnline Products: online Problem Types: CWE-295 Description: Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote host's certificate's against the full chain of trust. This vulnerability is fixed in Collabora Online 24.04.4.3, 23.05.14.1, and 22.05.23.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/CollaboraO
.05.14.1, and 22.05.23.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/CollaboraOnline/online/security/advisories/GHSA-hvhm-5c44-977x
CVE ID: CVE-2024-37312 State: PUBLISHED Published: 2024-06-14T14:43:24.137Z Last Updated: 2024-08-02T03:50:55.709Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-284 Description: user_oidc app is an OpenID Connect user backend for Nextcloud. Missing access control on the ID4me endpoint allows an attacker to register an account eventually getting access to data that is available to all registered users. It is recommended that the OpenID Connect user backend is upgraded to 3.0.0 (Nextcloud 20-23), 4.0.0 (Nexcloud 24) or 5.0.0 (Nextcloud 25-28). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
tcloud 20-23), 4.0.0 (Nexcloud 24) or 5.0.0 (Nextcloud 25-28). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vw7g-959g-vj6q - https://github.com/nextcloud/user_oidc/commit/9f68a716ecd264160a7c098b8840313f1ac855f2 - https://hackerone.com/reports/2376929
CVE ID: CVE-2024-37313 State: PUBLISHED Published: 2024-06-14T14:50:44.035Z Last Updated: 2024-08-02T03:50:56.117Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-287 Description: Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second factor of 2FA after successfully providing the user credentials. It is recommended that the Nextcloud Server is upgraded to 26.0.13, 27.1.8 or 28.0.4 and Nextcloud Enterprise Server is upgraded to 21.0.9.17, 22.2.10.22, 23.0.12.17, 24.0.12.13, 25.0.13.8, 26.0.13, 27.1.8 or 28.0.4. Additional Analyst Notes: - C
ed to 21.0.9.17, 22.2.10.22, 23.0.12.17, 24.0.12.13, 25.0.13.8, 26.0.13, 27.1.8 or 28.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9v72-9xv5-3p7c - https://github.com/nextcloud/server/pull/44276 - https://hackerone.com/reports/2419776
CVE ID: CVE-2024-37314 State: PUBLISHED Published: 2024-06-14T15:05:48.284Z Last Updated: 2024-08-02T03:50:56.192Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-284 Description: Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43 -
ram Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43 - https://github.com/nextcloud/photos/pull/1749 - https://hackerone.com/reports/1946298
CVE ID: CVE-2024-37315 State: PUBLISHED Published: 2024-06-14T15:08:54.357Z Last Updated: 2024-08-02T03:50:55.709Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-284 Description: Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the files_versions app is enabled. It is recommended that the Nextcloud Server is upgraded to 26.0.12, 27.1.7 or 28.0.3 and that the Nextcloud Enterprise Server is upgraded to 23.0.12.16, 24.0.12.12, 25.0.13.6, 26.0.12, 27.1.7 or 28.0.3. Additional Analyst Notes: - CISA ADP V
rver is upgraded to 23.0.12.16, 24.0.12.12, 25.0.13.6, 26.0.12, 27.1.7 or 28.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5mq8-738w-5942 - https://github.com/nextcloud/server/pull/43727 - https://hackerone.com/reports/1356508
CVE ID: CVE-2024-37316 State: PUBLISHED Published: 2024-06-14T15:23:12.705Z Last Updated: 2024-08-02T03:50:56.106Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-241 Description: Nextcloud Calendar is a calendar app for Nextcloud. Authenticated users could create an event with manipulated attachment data leading to a bad redirect for participants when clicked. It is recommended that the Nextcloud Calendar App is upgraded to 4.6.8 or 4.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHS
ichment: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2r7q-vfmv-79qf - https://github.com/nextcloud/calendar/pull/5966 - https://hackerone.com/reports/2457588
CVE ID: CVE-2024-37317 State: PUBLISHED Published: 2024-06-14T15:25:24.475Z Last Updated: 2024-08-02T03:50:55.961Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-284 Description: The Nextcloud Notes app is a distraction free notes taking app for Nextcloud. If an attacker managed to share a folder called `Notes/` with a newly created user before they logged in, the Notes app would use that folder store the personal notes. It is recommended that the Nextcloud Notes app is upgraded to 4.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nex
4.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wfqv-cx85-7rjx - https://github.com/nextcloud/notes/pull/1260 - https://hackerone.com/reports/2254151
CVE ID: CVE-2024-37318 State: PUBLISHED Published: 2024-07-09T17:02:17.073Z Last Updated: 2025-10-14T22:12:58.433Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37318
CVE ID: CVE-2024-37319 State: PUBLISHED Published: 2024-07-09T17:02:48.643Z Last Updated: 2025-10-14T22:13:31.073Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37319
CVE ID: CVE-2024-37320 State: PUBLISHED Published: 2024-07-09T17:02:49.195Z Last Updated: 2025-10-14T22:13:31.715Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27) Problem Types: CWE-416 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-416 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37320
CVE ID: CVE-2024-37321 State: PUBLISHED Published: 2024-07-09T17:02:49.778Z Last Updated: 2025-10-14T22:13:32.292Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37321
CVE ID: CVE-2024-37322 State: PUBLISHED Published: 2024-07-09T17:02:50.332Z Last Updated: 2025-10-14T22:13:32.915Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37322
CVE ID: CVE-2024-37323 State: PUBLISHED Published: 2024-07-09T17:02:50.926Z Last Updated: 2025-10-14T22:13:33.601Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13) Problem Types: CWE-190 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-190 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37323
CVE ID: CVE-2024-37324 State: PUBLISHED Published: 2024-07-09T17:02:51.484Z Last Updated: 2025-10-14T22:13:34.180Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37324
CVE ID: CVE-2024-37325 State: PUBLISHED Published: 2024-06-11T17:00:10.091Z Last Updated: 2025-07-16T00:42:34.389Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Data Science Virtual Machines Problem Types: CWE-200 Description: Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37325
CVE ID: CVE-2024-37326 State: PUBLISHED Published: 2024-07-09T17:02:52.612Z Last Updated: 2025-10-14T22:13:35.256Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37326
CVE ID: CVE-2024-37327 State: PUBLISHED Published: 2024-07-09T17:02:53.172Z Last Updated: 2025-10-14T22:13:35.827Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37327
CVE ID: CVE-2024-37328 State: PUBLISHED Published: 2024-07-09T17:02:53.736Z Last Updated: 2025-10-14T22:13:36.540Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37328
CVE ID: CVE-2024-37329 State: PUBLISHED Published: 2024-07-09T17:02:54.322Z Last Updated: 2025-10-14T22:13:37.095Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37329
CVE ID: CVE-2024-37330 State: PUBLISHED Published: 2024-07-09T17:02:54.896Z Last Updated: 2025-10-14T22:13:37.582Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37330
CVE ID: CVE-2024-37331 State: PUBLISHED Published: 2024-07-09T17:02:18.217Z Last Updated: 2025-10-14T22:12:59.614Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37331
CVE ID: CVE-2024-37332 State: PUBLISHED Published: 2024-07-09T17:02:17.679Z Last Updated: 2025-10-14T22:12:58.971Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37332
CVE ID: CVE-2024-37333 State: PUBLISHED Published: 2024-07-09T17:02:55.997Z Last Updated: 2025-10-14T22:13:38.621Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37333
CVE ID: CVE-2024-37334 State: PUBLISHED Published: 2024-07-09T17:02:55.450Z Last Updated: 2025-10-14T22:13:38.140Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2022 (GDR), Microsoft OLE DB Driver 19 for SQL Server, Microsoft OLE DB Driver 18 for SQL Server, Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27) Problem Types: CWE-122 Description: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.
bility Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37334