deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-49521
Published: 2024-11-12
Description: Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction.
CVSS Score: 7.7 (HIGH)
CWE: CWE-918, CWE-918
References: https://helpx.adobe.com/security/products/magento/apsb24-90.html
CVE: CVE-2024-49526
Published: 2024-11-12
Description: Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/animate/apsb24-76.html
CVE: CVE-2024-49527
Published: 2024-11-12
Description: Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb24-76.html
CVE: CVE-2024-49528
Published: 2024-11-12
Description: Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb24-76.html
CVE: CVE-2024-50336
Published: 2024-11-12
Description: matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the client's homeserver. Fixed in matrix-js-sdk 34.11.1.
CWE: CWE-22
References: https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-xvg8-m4x3-w6xr; https://spec.matrix.org/v1.12/client-server-api/#security-considerations-5; https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html
CVE: CVE-2024-51749
Published: 2024-11-12
Description: Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.85 do not check if thumbnails for attachments, stickers and images are coherent. It is possible to add thumbnails to events trigger a file download once clicked. Fixed in element-web 1.11.85.
CVSS Score: 3.5 (LOW)
CWE: CWE-451
References: https://github.com/element-hq/element-web/commit/a00c343435d633e64de2c0548217aa611c7bbef5; https://github.com/element-hq/element-web/security/advisories/GHSA-5486-384g-mcx2
CVE: CVE-2024-51750
Published: 2024-11-12
Description: Element is a Matrix web client built using the Matrix React SDK. A malicious homeserver can send invalid messages over federation which can prevent Element Web and Desktop from rendering single messages or the entire room containing them. This was patched in Element Web and Desktop 1.11.85.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-248
References: https://github.com/element-hq/element-web/commit/231073c578d5f92b33cde7aa2b0b9c5836b2dc48; https://github.com/element-hq/element-web/security/advisories/GHSA-w36j-v56h-q9pc
CVE: CVE-2024-52010
Published: 2024-11-12
Description: Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Zoraxy has a Web SSH terminal feature that allows authenticated users to connect to SSH servers from their browsers. In HandleCreateProxySession the request to create an SSH session is handled. An attacker can exploit the username variable to escape from the bash command and inject arbitrary commands into sshCommand. This is possible, because, unlike hostname and port, the username is not validated or sanitized.
CWE: CWE-78
References: https://github.com/tobychui/zoraxy/commit/2e9bc77a5d832bff1093058d42ce7a61382e4bc6; https://github.com/tobychui/zoraxy/commit/c07d5f85dfc37bd32819358ed7d4bc32c604e8f0; https://github.com/tobychui/zoraxy/security/advisories/GHSA-7hpf-g48v-hw3j
CVE: CVE-2024-7571
Published: 2024-11-12
Description: Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-267
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE: CVE-2024-8539
Published: 2024-11-12
Description: Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files.
CVSS Score: 7.1 (HIGH)
CWE: CWE-267
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE: CVE-2024-9842
Published: 2024-11-12
Description: Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders.
CVSS Score: 7.3 (HIGH)
CWE: CWE-267, CWE-732, CWE-732
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE: CVE-2024-9843
Published: 2024-11-12
Description: A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE: CVE-2024-9999
Published: 2024-11-12
Description: In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-303
References: https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2024; https://www.progress.com/ftp-server
CVE: CVE-2024-11138
Published: 2024-11-12
Description: A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_add.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 2.7 (LOW)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/falling-snow1/cve1/blob/main/DedeCMS%20V5.7.116%20has%20Remote%20Code%20Excute%20vulnerability.md; https://vuldb.com/?ctiid.283977; https://vuldb.com/?id.283977
CVE: CVE-2024-21937
Published: 2024-11-12
Description: Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6015.html
CVE: CVE-2024-21938
Published: 2024-11-12
Description: Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9005.html
CVE: CVE-2024-21939
Published: 2024-11-12
Description: Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9006.html
CVE: CVE-2024-21945
Published: 2024-11-12
Description: Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9004.html
CVE: CVE-2024-21946
Published: 2024-11-12
Description: Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9004.html
CVE: CVE-2024-21949
Published: 2024-11-12
Description: Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7017.html
CVE: CVE-2024-21957
Published: 2024-11-12
Description: Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9003.html
CVE: CVE-2024-21958
Published: 2024-11-12
Description: Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9007.html
CVE: CVE-2024-21974
Published: 2024-11-12
Description: Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7017.html
CVE: CVE-2024-21975
Published: 2024-11-12
Description: Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7017.html
CVE: CVE-2024-21976
Published: 2024-11-12
Description: Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7017.html
CVE: CVE-2024-38203
Published: 2024-11-12
Description: Windows Package Library Manager Information Disclosure Vulnerability
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38203
CVE: CVE-2024-38255
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38255
CVE: CVE-2024-38264
Published: 2024-11-12
Description: Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38264
CVE: CVE-2024-43447
Published: 2024-11-12
Description: Windows SMBv3 Server Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43447
CVE: CVE-2024-43449
Published: 2024-11-12
Description: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43449
CVE: CVE-2024-43450
Published: 2024-11-12
Description: Windows DNS Spoofing Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-924
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43450
CVE: CVE-2024-43451
Published: 2024-11-12
Description: NTLM Hash Disclosure Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43451; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43451
CVE: CVE-2024-43452
Published: 2024-11-12
Description: Windows Registry Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43452
CVE: CVE-2024-43459
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43459
CVE: CVE-2024-43462
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43462
CVE: CVE-2024-43498
Published: 2024-11-12
Description: .NET and Visual Studio Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43498
CVE: CVE-2024-43499
Published: 2024-11-12
Description: .NET and Visual Studio Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-409, CWE-606
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43499
CVE: CVE-2024-43530
Published: 2024-11-12
Description: Windows Update Stack Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43530
CVE: CVE-2024-43598
Published: 2024-11-12
Description: LightGBM Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43598
CVE: CVE-2024-43602
Published: 2024-11-12
Description: Azure CycleCloud Remote Code Execution Vulnerability
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43602
CVE: CVE-2024-43620
Published: 2024-11-12
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43620
CVE: CVE-2024-43621
Published: 2024-11-12
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43621
CVE: CVE-2024-43622
Published: 2024-11-12
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43622
CVE: CVE-2024-43623
Published: 2024-11-12
Description: Windows NT OS Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43623
CVE: CVE-2024-43624
Published: 2024-11-12
Description: Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43624
CVE: CVE-2024-43625
Published: 2024-11-12
Description: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43625
CVE: CVE-2024-43626
Published: 2024-11-12
Description: Windows Telephony Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43626
CVE: CVE-2024-43627
Published: 2024-11-12
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43627
CVE: CVE-2024-43628
Published: 2024-11-12
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43628
CVE: CVE-2024-43629
Published: 2024-11-12
Description: Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43629
CVE: CVE-2024-43630
Published: 2024-11-12
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43630
CVE: CVE-2024-43631
Published: 2024-11-12
Description: Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43631
CVE: CVE-2024-43633
Published: 2024-11-12
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43633
CVE: CVE-2024-43634
Published: 2024-11-12
Description: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43634
CVE: CVE-2024-43635
Published: 2024-11-12
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43635
CVE: CVE-2024-43636
Published: 2024-11-12
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43636
CVE: CVE-2024-43637
Published: 2024-11-12
Description: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43637
CVE: CVE-2024-43638
Published: 2024-11-12
Description: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43638
CVE: CVE-2024-43639
Published: 2024-11-12
Description: Windows KDC Proxy Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43639
CVE: CVE-2024-43640
Published: 2024-11-12
Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43640
CVE: CVE-2024-43641
Published: 2024-11-12
Description: Windows Registry Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43641
CVE: CVE-2024-43642
Published: 2024-11-12
Description: Windows SMB Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43642
CVE: CVE-2024-43643
Published: 2024-11-12
Description: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43643
CVE: CVE-2024-43644
Published: 2024-11-12
Description: Windows Client-Side Caching Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43644
CVE: CVE-2024-43645
Published: 2024-11-12
Description: Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43645
CVE: CVE-2024-43646
Published: 2024-11-12
Description: Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43646
CVE: CVE-2024-48993
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-48993
CVE: CVE-2024-48994
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-48994
CVE: CVE-2024-48995
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-48995
CVE: CVE-2024-48996
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-48996
CVE: CVE-2024-48997
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-48997
CVE: CVE-2024-48998
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-48998
CVE: CVE-2024-48999
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-48999
CVE: CVE-2024-49000
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49000
CVE: CVE-2024-49001
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49001
CVE: CVE-2024-49002
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49002
CVE: CVE-2024-49003
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49003
CVE: CVE-2024-49004
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49004
CVE: CVE-2024-49005
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49005
CVE: CVE-2024-49006
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49006