KB5014164 - Description of the security update for SQL Server 2014 SP3 CU4: June 14, 2022

KB5014164 - Description of the security update for SQL Server 2014 SP3 CU4: June 14, 2022 Applies To SQL Server 2014 Summary How to obtain and install the update More information File information Information about protection and security Summary An authenticated attacker could affect SQL Server...

KB5014165 - Description of the security update for SQL Server 2014 SP3 GDR: June 14, 2022

KB5014165 - Description of the security update for SQL Server 2014 SP3 GDR: June 14, 2022 Applies To SQL Server 2014 Summary How to obtain and install the update More information File information Information about protection and security Summary An authenticated attacker could affect SQL Server...

KB5014351 - Description of the security update for SQL Server 2016 SP2 CU17: June 14, 2022

KB5014351 - Description of the security update for SQL Server 2016 SP2 CU17: June 14, 2022 Applies To SQL Server 2016 Service Pack 2 Summary How to obtain and install the update More information File information Information about protection and security Summary An authenticated attacker could...

Microsoft SQL Server Remote Code Execution Vulnerability

...

Microsoft SQL Server security vulnerabilities

Microsoft SQL Server is a large-scale commercial database system from Microsoft that is used on Microsoft Windows systems. A security vulnerability exists in Microsoft SQL Server. The following products and versions are affected:Microsoft SQL Server 2017 for x64-based Systems GDR,Microsoft SQL...

Vulnerability fixed in Microsoft SQL Server

A vulnerability has been fixed in Microsoft SQL Server. The vulnerability allows an authenticated malicious person to execute arbitrary code, possibly as a Database Administrator, by executing a specially prepared query via the $ partition on a table where a Column Store index is present. Abuse o...

KLA12562 RCE vulnerability in Microsoft SQL Server

A remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2022-29143 Exploitation Related products Microsoft-SQL-Server Microsoft-Azure CVE list CVE-2022-29143 unknown KB list 5014354...

CVE-2022-30335

Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...

CVE-2022-30335

Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...

Sql injection

Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...

CVE-2022-30335

Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...

CVE-2022-30335

CVE-2022-30335 affects Bonanza Wealth Management System (BWM) 7.3.2. The vulnerability is a SQL injection in the login form, exploitable via the User Name textbox, which could enable an attacker to collect all passwords in encrypted format from the Microsoft SQL Server component. The connected do...

CVE-2022-30335: Improper Neutralization of Special Elements used in an SQL Command

Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...

PT-2022-20069

Name of the Vulnerable Software and Affected Versions Bonanza Wealth Management System BWM version 7.3.2 Description The issue allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted...

KLA12510 Spoofing vulnerability in Microsoft SQL Server

A spoofing vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-23292 Exploitation Related products Microsoft-Power-BI CVE list CVE-2022-23292 warning KB list Solution Install necessary updates from t...

PT-2022-3130 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SQL Server, allowing a remote attacker to execute arbitrary code by sending a specially crafted SQL query. Th...

CVE-2022-0859

McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL server during the restoration of the ePO server. To achieve this the attacker would have to be logged onto the server hosting the ePO server restricted to...

CVE-2022-0859

McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL server during the restoration of the ePO server. To achieve this the attacker would have to be logged onto the server hosting the ePO server restricted to...

Sql injection

McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL server during the restoration of the ePO server. To achieve this the attacker would have to be logged onto the server hosting the ePO server restricted to...

CVE-2022-0859 ePO database restoration vulnerability

McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL server during the restoration of the ePO server. To achieve this the attacker would have to be logged onto the server hosting the ePO server restricted to...