Posts of last 24 hours

CVE-2023-21704 | Microsoft SQL Server up to Server 2014 SP3 ODBC Driver integer overflow
A vulnerability categorized as critical has been discovered in Microsoft SQL Server Server 2014 SP3/2016/2017/2019/2022. Impacted is an unknown function of the component ODBC Driver. Executing a manipulation can lead to integer overflow. The identification of this vulnerability is CVE-2023-21704. The attack may be launched remotely. There is no exploit available. Applying a patch is advised to resolve this issue.
https://vuldb.com/vuln/220985
CVE-2023-21705 | Microsoft SQL Server up to 2022 hard-coded key
A vulnerability identified as critical has been detected in Microsoft SQL Server 2014 SP3/2016/2017/2019/2022. The affected element is an unknown function. The manipulation leads to use of hard-coded cryptographic key . This vulnerability is referenced as CVE-2023-21705. Remote exploitation of the attack is possible. No exploit is available. It is suggested to install a patch to address this issue.
https://vuldb.com/vuln/220986
CVE-2023-21706 | Microsoft Exchange Server 2013 CU23/2016 CU23/2019 CU11/2019 CU12 deserialization
A vulnerability labeled as critical has been found in Microsoft Exchange Server 2013 CU23/2016 CU23/2019 CU11/2019 CU12. The impacted element is an unknown function. The manipulation results in deserialization. This vulnerability is identified as CVE-2023-21706. The attack can be executed remotely. There is not any exploit available. A patch should be applied to remediate this issue.
https://vuldb.com/vuln/220987
CVE-2023-21707 | Microsoft Exchange Server 2013 CU23/2016 CU23/2019 CU11/2019 CU12 deserialization
A vulnerability marked as critical has been reported in Microsoft Exchange Server 2013 CU23/2016 CU23/2019 CU11/2019 CU12. This affects an unknown function. This manipulation causes deserialization. This vulnerability is tracked as CVE-2023-21707. The attack is possible to be carried out remotely. No exploit exists. To fix this issue, it is recommended to deploy a patch.
https://vuldb.com/vuln/220988
CVE-2023-21713 | Microsoft SQL Server up to 2022 deserialization
A vulnerability classified as critical has been found in Microsoft SQL Server 2014 SP3/2016/2017/2019/2022. Affected is an unknown function. Performing a manipulation results in deserialization. This vulnerability is cataloged as CVE-2023-21713. It is possible to initiate the attack remotely. There is no exploit available. Applying a patch is the recommended action to fix this issue.
https://vuldb.com/vuln/220990
CVE-2023-21716 | Microsoft Word wwlib integer overflow (CNNVD-202302-1110)
A vulnerability, which was classified as critical, was found in Microsoft Word. This affects an unknown part of the component wwlib. The manipulation results in integer overflow. This vulnerability is reported as CVE-2023-21716. The attack can be launched remotely. Moreover, an exploit is present. Applying a patch is advised to resolve this issue.
https://vuldb.com/vuln/220993
CVE-2023-21717 | Microsoft SharePoint Foundation 2013 SP1/2016/2019 access control
A vulnerability has been found in Microsoft SharePoint Foundation 2013 SP1/2016/2019 and classified as critical. This vulnerability affects unknown code. This manipulation causes improper access controls. This vulnerability appears as CVE-2023-21717. The attack may be initiated remotely. There is no available exploit. It is suggested to install a patch to address this issue.
https://vuldb.com/vuln/220994
CVE-2023-21718 | Microsoft SQL Server up to 2022 ODBC Driver integer underflow
A vulnerability was found in Microsoft SQL Server 2014 SP3/2016/2017/2019/2022 and classified as critical. This issue affects some unknown processing of the component ODBC Driver. Such manipulation leads to integer underflow. This vulnerability is traded as CVE-2023-21718. The attack may be launched remotely. There is no exploit available. A patch should be applied to remediate this issue.
https://vuldb.com/vuln/220995
CVE-2023-21721 | Microsoft OneNote on Android improper authentication
A vulnerability was found in Microsoft OneNote on Android. It has been classified as problematic. Impacted is an unknown function. Performing a manipulation results in improper authentication. This vulnerability is known as CVE-2023-21721. Attacking locally is a requirement. No exploit is available. To fix this issue, it is recommended to deploy a patch.
https://vuldb.com/vuln/220996
CVE-2026-53425 | Dropbox samly SP Handler lib/samly/sp_handler.ex Samly.SPHandler.validate_authresp data authenticity (CNNVD-2026-98819056)
A vulnerability was found in Dropbox samly. It has been classified as critical. This affects the function Samly.SPHandler.validate_authresp of the file lib/samly/sp_handler.ex of the component SP Handler. The manipulation leads to insufficient verification of data authenticity. This vulnerability is uniquely identified as CVE-2026-53425. The attack is possible to be carried out remotely. No exploit exists.
https://vuldb.com/vuln/393798

Managed ad