137 matches found
CVE-2019-10123
SQL Injection in Advanced InfoData Systems AIS ESEL-Server 67 which is the backend for the AIS logistics mobile app allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user...
Microsoft SQL Server Management Studio XXE Information Disclosure
The vulnerability of the Microsoft SQL Server Management Studio database management system is related to errors in XML references to external objects XXE. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information using a specially crafted file...
Microsoft JET Database Engine Code Execution
The vulnerability of the Microsoft JET Database Engine for Windows operating systems arises due to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created Excel file...
CVE-2016-7253
The agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not properly check the atxcore.dll ACL, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Server Agent Elevation of Privilege Vulnerability."...
CVE-2016-7252
Microsoft SQL Server 2016 mishandles the FILESTREAM path, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Analysis Services Information Disclosure Vulnerability."...
Microsoft SQL Server Information Disclosure Vulnerability
Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server. An attacker can exploit the...
Microsoft SQL Server RDBMS Engine Elevation of Privilege Vulnerability
Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in the Microsoft SQL Server RDBMS engine. An attacker can...
Windows-Exploit-Suggester v3.2 - Compares a targets patch levels against the Microsoft vulnerability database
This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the 'systeminfo' comman...
PT-2016-2119 · Php +2 · Php +2
Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.6.12 Description: The issue is related to the odbc bindcols function in PHP, which mishandles driver behavior for SQL WVARCHAR columns. This can be exploited by remote attackers to cause a denial of service application...
SQL Server 2025 RTM Cumulative Update (CU) 5 KB5084896
SQL Server 2025 RTM Cumulative Update CU 5 KB5084896...
Microsoft SQL Server 2014 SP1 Cumulative Update (CU) 8 KB3174038
Microsoft SQL Server 2014 SP1 Cumulative Update CU 8 KB3174038...
SQL Server 2017 RTM Cumulative Update (CU) 21 KB4557397
SQL Server 2017 RTM Cumulative Update CU 21 KB4557397...
SQL Server 2019 RTM Cumulative Update (CU) 13 KB5005679
SQL Server 2019 RTM Cumulative Update CU 13 KB5005679...
SQL Server 2022 RTM Cumulative Update (CU) 26 KB5093420
SQL Server 2022 RTM Cumulative Update CU 26 KB5093420...
SQL Server 2022 RTM Cumulative Update (CU) 23 KB5078297
SQL Server 2022 RTM Cumulative Update CU 23 KB5078297...
