KB4577775 - Cumulative Update 15 for SQL Server 2016 SP2

KB4577775 - Cumulative Update 15 for SQL Server 2016 SP2 Release Date: September 28, 2020 Version: 13.0.5850.14 This article describes Cumulative Update package 15 CU15 build number: 13.0.5850.14 for Microsoft SQL Server 2016 Service Pack 2 SP2. This update contains fixes that were released after...

KB5000645 - Cumulative Update 16 for SQL Server 2016 SP2

KB5000645 - Cumulative Update 16 for SQL Server 2016 SP2 Release Date: February 11, 2021 Version: 13.0.5882.1 Note After you apply CU 16 for SQL Server 2016 SP2, you might encounter an issue in which DML insert/update/delete queries that use parallel plans cannot complete any execution and...

KB4564903 - Cumulative Update 14 for SQL Server 2016 SP2

KB4564903 - Cumulative Update 14 for SQL Server 2016 SP2 Release Date: August 06, 2020 Version: 13.0.5830.85 This article describes Cumulative Update package 14 CU14 build number: 13.0.5830.85 for Microsoft SQL Server 2016 Service Pack 2 SP2. This update contains fixes that were released after th...

KB4524334 - Cumulative Update 10 for SQL Server 2016 SP2

KB4524334 - Cumulative Update 10 for SQL Server 2016 SP2 Release Date: October 08, 2019 Version: 13.0.5492.2 Note SQL Server 2016 SP2 CU10 is a replacement for SQL Server 2016 SP2 CU9. CU9 had an uninstall issue that is resolved in the CU10 package. If you previously installed CU9, we recommend...

KB4488536 - Cumulative Update 6 for SQL Server 2016 SP2

KB4488536 - Cumulative Update 6 for SQL Server 2016 SP2 Release Date: March 19, 2019 Version: 13.0.5292.0 This article describes Cumulative Update package 6 CU6 build number: 13.0.5292.0 for Microsoft SQL Server 2016 Service Pack 2 SP2. This update contains fixes that were released after the...

KB4495257 - Cumulative Update 15 for SQL Server 2016 SP1

KB4495257 - Cumulative Update 15 for SQL Server 2016 SP1 Release Date: May 16, 2019 Version: 13.0.4574.0 This article describes cumulative update package 15 build number: 13.0.4574.0 for Microsoft SQL Server 2016 Service Pack 1 SP1. This update contains fixes that were released after the release ...

Threat Hunting Powered by Efficient and Straightforward Anomaly Detection on Your Data Lake

Effective monitoring and anomaly detection within a data environment are crucial, particularly in todays data-driven landscape. At Imperva Threat Research, our data lake serves as the backbone for a range of critical functions, including threat hunting, risk analysis, and trend detection. However...

CVE-2023-30553

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to multiple SQL injections in the sqlapi/apiworkflow.py endpoint ExecuteCheck. User input...

CVE-2023-30557

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the datadictionary.py tableinfo. User input coming from the dbname in a...

Sql injection

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the datadictionary.py tableinfo. User input coming from the dbname in a...

CVE-2023-30605 Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the variablename and variablevalue parameter value in the sql/instance.py paramedit endpoint is...

CVE-2023-30558

CVE-2023-30558 affects Archery, an open source SQL audit platform. The vulnerability arises from multiple SQL injection flaws in the sql/data_dictionary.py table_list endpoint, where untrusted input from the db_name parameter is concatenated into SQL queries and passed to database engines. Affect...

CVE-2023-30557 SQL injection in data_dictionary.py table_info method in Archery - GHSL-2022-106

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the datadictionary.py tableinfo. User input coming from the dbname in a...

CVE-2023-30557 SQL injection in data_dictionary.py table_info method in Archery - GHSL-2022-106

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the datadictionary.py tableinfo. User input coming from the dbname in a...

CVE-2023-30552 SQL injection in sql/instance.py endpoint in Archery - GHSL-2022-101

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the sql/instance.py endpoint's describe method. In several cases, user...

CVE-2014-3095

The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted UNION clause in a subquery of a SELECT statement...

Code injection

The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted UNION clause in a subquery of a SELECT statement...

CVE-2014-3095

The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted UNION clause in a subquery of a SELECT statement...

CVE-2014-3095: Improper Input Validation

The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted UNION clause in a subquery of a SELECT statement...

Intersystems Cache Remote Code Execution (via Default 'Minimal Security' Install)

------------------- 1 Overview Title: Intersystems Cache Remote Code Execution via Default 'Minimal Security' Install Product: Intersystems Cache Product URL: http://www.intersystems.com/cache/index.html Vendor: Intersystems Affected Versions: Tested on Cache for Windows x86-64 & i386 2009. thru...