PT-2016-7270

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2012 SP2 through 2012 SP3 Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain elevated privileges. An attacker with access to an affected SQL server...

PT-2016-7268

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016 Description The issue is related to the improper handling of the FILESTREAM path in Microsoft SQL Analysis Services, which can lead to an information disclosure. This can be exploited by an attacker with access to an...

Microsoft SQL Server CVE-2016-7254 Privilege Escalation Vulnerability

Description Microsoft SQL Server is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft SQL Server 2012 for 32-bit Systems Service Pack 2 Microsoft SQL Server 2012 for 32-bit Systems Service Pack 3 Microsof...

PT-2016-7266

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2014 SP1 through 2016 Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain elevated privileges. An attacker with access to an affected SQL server...

PT-2016-7269

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2012 SP2 through 2016 Description The issue arises from the SQL Server Agent's failure to properly check the atxcore.dll ACL, allowing remote authenticated users to gain privileges. An attacker could exploit this...

KLA10901 Multiple vulnerabilities in Microsoft SQL Server

Multiple serious vulnerabilities have been found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to gain privileges or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper pointer casting handling can be exploited by remotely...

Microsoft SQL Server 2012 11.0.x.x < 11.0.3460.0 Multiple Vulnerabilities (2977325)

Binary data 9704.prm...

Microsoft SQL Server 2008 10.00.x.x < 10.00.5869.00 Multiple Vulnerabilities (2984340)

Binary data 9702.prm...

Microsoft SQL Server 2014 12.0.x.x < 12.0.2381.0 Multiple Vulnerabilities (2977316)

Binary data 9705.prm...

Microsoft SQL Server 2008 R2 10.50.x.x < 10.50.4321.00 Multiple Vulnerabilities (2977319)

Binary data 9703.prm...

Microsoft SQL Server Unquoted Service Path Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Microsoft SQL Server Unquoted Service Path Privilege Escalation Date: 10/142016 Author: Saeed Hasanzadeh Net.Hun73r Vendor Homepage: https://www.microsoft.com Software Link:...

Microsoft SQL Server 2014 Detection

Binary data 9511.prm...

Microsoft SQL Server 2008 Detection

Binary data 9508.prm...

Microsoft SQL Server 2008 R2 Detection

Binary data 9509.prm...

Microsoft SQL Server 2012 Detection

Binary data 9510.prm...

CVE-2016-3059

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka IBM Spectrum Protect for Databases 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server aka IBM Spectrum Protect Snapshot 3.1 before 3.1.1.7 and 3.2 before...

CVE-2016-3059

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka IBM Spectrum Protect for Databases 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server aka IBM Spectrum Protect Snapshot 3.1 before 3.1.1.7 and 3.2 before...

CVE-2016-3059

CVE-2016-3059 affects IBM Tivoli Storage Manager for Databases (IBM Spectrum Protect for Databases) and IBM Tivoli Storage FlashCopy Manager for Microsoft SQL Server (IBM Spectrum Protect Snapshot). The vulnerability allows local users to disclose the cleartext SQL Server password by reading the ...

CVE-2016-3059: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka IBM Spectrum Protect for Databases 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server aka IBM Spectrum Protect Snapshot 3.1 before 3.1.1.7 and 3.2 before...

PT-2016-5347

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server versions 6.3 through 6.3.1.7 IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server versions 6.4 through 6.4.1.9 Tivoli Storage...