4591 matches found
CVE-2025-34227 Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection
Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...
Cannot request cryptocontainer. Win32 error:Keyset as registered is invalid
Challenge A Veeam Agent for Microsoft Windows backup job completes with the following warnings: Cannot request cryptocontainer. Win32 error:Keyset as registered is invalid. and SQL VSS Writer is missing: databases will be backed up in crash-consistent state and transaction log processing will be...
CVE-2025-47997
Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2025-55227
Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
Patch Tuesday - September 2025
Microsoft is addressing 176 vulnerabilities today, which seems like a lot, and it is. Curiously, Microsoft’s own Security Update Guide SUG for September 2025 Patch Tuesday only lists 86 vulns, and that’s because the SUG doesn’t include a large number of open source software OSS fixes published...
Vulnerabilities fixed in Microsoft SQL Server
Microsoft has fixed vulnerabilities in SQL Server. A malicious party could exploit the vulnerabilities to cause a denial-of-service DoS, grant themselves elevated privileges and/or gain access to sensitive data. Microsoft has made updates available that fix the described vulnerabilities. We...
CVE-2025-55227
Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2025-55227
Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2025-47997
Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2025-47997
Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2025-55227 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2025-55227 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2025-47997 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2025-47997 Microsoft SQL Server Information Disclosure Vulnerability
...
KB5065227 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: September 9, 2025
None None...
KB5065225 - Description of the security update for SQL Server 2017 CU31: September 9, 2025
None None...
KB5065222 - Description of the security update for SQL Server 2019 CU32: September 9, 2025
None None...
KB5065226 - Description of the security update for SQL Server 2016 SP3 GDR: September 9, 2025
None None...