5694 matches found
CVE-2026-6093
Corteza contains a SQL injection vulnerability in its Microsoft SQL Server MSSQL backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8...
Essity: Critical SQL Injection WDM API (████████)
A boolean-based and time-based blind SQL injection vulnerability was discovered in the searchText query parameter of the GET /api/WDMProduct endpoint. The vulnerability allowed an unauthenticated attacker to read or modify data in the backing Microsoft SQL Server database. The backend was found t...
Microsoft SQL Server Code Execution
The vulnerability of the Microsoft SQL Server database management system is related to improper external manipulation of file names or file paths. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
Security Updates for Microsoft SQL Server (May 2026) (Remote)
The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - External control of file name or path in SQL Server allows an authorized attacker to execute code over a network. CVE-2026-40370 Note that Nessus has...
Security Updates for Microsoft SQL Server (May 2026)
The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - External control of file name or path in SQL Server allows an authorized attacker to execute code over a network. CVE-2026-40370 Note that Nessus has...
CVE-2026-40370
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-29652
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-40370
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network...
The vulnerability was exploited in Microsoft SQL Server
Microsoft has identified a vulnerability in SQL Server. A malicious individual with authorized access can exploit this vulnerability to execute arbitrary code under the control of the SQL Server. Microsoft has provided updates that address the described vulnerabilities. We recommend that you...
CVE-2026-40370
CVE-2026-40370 is a SQL Server Remote Code Execution vulnerability described across multiple sources as external control of a file name or path that can allow an authorized attacker to run code over the network. Connected documents enumerate affected SQL Server components and versions (e.g., SQL ...
KB5090408 - Description of the security update for SQL Server 2019 GDR: May 12, 2026
None None...
KB5089271 - Description of the security update for SQL Server 2016 SP3 GDR: May 12, 2026
None None...
KB5090407 - Description of the security update for SQL Server 2019 CU32: May 12, 2026
None None...
KB5091158 - Description of the security update for SQL Server 2022 GDR: May 12, 2026
None None...
KB5089899 - Description of the security update for SQL Server 2025 CU4: May 12, 2026
None None...
KB5090354 - Description of the security update for SQL Server 2017 CU31: May 12, 2026
None None...
KB5090347 - Description of the security update for SQL Server 2017 GDR: May 12, 2026
None None...
KB5089900 - Description of the security update for SQL Server 2022 CU24: May 12, 2026
None None...
