CVE-2024-21450 – Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-21450
12 Mar 2024 — Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Proveedor Microsoft WDAC OLE DB para la vulnerabilidad de ejecución remota de código de SQL Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21450 • CWE-190: Integer Overflow or Wraparound •
CVE-2024-21446 – NTFS Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-21446
12 Mar 2024 — NTFS Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de NTFS • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21446 • CWE-591: Sensitive Data Storage in Improperly Locked Memory •
CVE-2024-21444 – Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-21444
12 Mar 2024 — Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Proveedor Microsoft WDAC OLE DB para la vulnerabilidad de ejecución remota de código de SQL Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21444 • CWE-190: Integer Overflow or Wraparound •
CVE-2024-21441 – Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-21441
12 Mar 2024 — Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Proveedor Microsoft WDAC OLE DB para la vulnerabilidad de ejecución remota de código de SQL Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21441 • CWE-190: Integer Overflow or Wraparound •
CVE-2024-21439 – Windows Telephony Server Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-21439
12 Mar 2024 — Windows Telephony Server Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del servidor de telefonía de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21439 • CWE-416: Use After Free •
CVE-2024-21429 – Windows USB Hub Driver Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-21429
12 Mar 2024 — Windows USB Hub Driver Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del controlador del concentrador USB de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21429 • CWE-197: Numeric Truncation Error •
CVE-2024-21363 – Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-21363
13 Feb 2024 — Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Message Queuing (MSMQ) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21363 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2024-21420 – Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-21420
13 Feb 2024 — Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Proveedor Microsoft WDAC OLE DB para la vulnerabilidad de ejecución remota de código de SQL Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21420 • CWE-190: Integer Overflow or Wraparound •
CVE-2024-21357 – Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-21357
13 Feb 2024 — Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de multidifusión general pragmática (PGM) de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21357 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2023-44487 – HTTP/2 Rapid Reset Attack Vulnerability
https://notcve.org/view.php?id=CVE-2023-44487
10 Oct 2023 — The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. El protocolo HTTP/2 permite una denegación de servicio (consumo de recursos del servidor) porque la cancelación de solicitudes puede restablecer muchas transmisiones rápidamente, como se explotó en la naturaleza entre agosto y octubre de 2023. A flaw was found in handling multiplexed streams in the HTTP/2 protocol. ... • https://github.com/imabee101/CVE-2023-44487 • CWE-400: Uncontrolled Resource Consumption •