red-gate vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

In Redgate SQL Monitor prior to 3.10 and 4.x prior to 4.2, a remote attacker can gain unauthenticated access to the Base Monitor, resulting in the ability to execute arbitrary SQL commands on any monitored Microsoft SQL Server machines. If the Base Monitor is connecting to these ...

Red-gate Sql Monitor Red-gate Sql Monitor 4.0 Red-gate Sql Monitor 4.1

1 EDB exploit

6.8

CVSSv2

Redgate .NET Reflector prior to 10.0.7.774 and SmartAssembly prior to 6.12.5 allow malicious users to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific embedded resource file.

Red-gate Smartassembly Red-gate .net Reflector

4.3

CVSSv2

In Redgate SQL Monitor 7.1.4 up to and including 10.1.6 (inclusive), the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration > Notifications pages to disable certificate checking for alert notification...

Red-gate Sql Monitor

NA

Red Gate SQL Monitor 11.0.14 up to and including 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges.

Red-gate Sql Monitor

6.5

CVSSv2

Red Gate SQL Monitor 9.0.13 up to and including 9.2.14 allows an administrative user to perform a SQL injection attack by configuring the SNMP alert settings in the UI. This is fixed in 9.2.15.

Red-gate Sql Monitor

NA

A Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows remote malicious users to inject arbitrary web Script or HTML via the returnUrl parameter.

Red-gate Sql Monitor 12.1.31.893

1 Github repository

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook