The vulnerability of the SQLcmd utility in the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the SQLcmd utility in the Microsoft SQL Server database management system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created data...

PT-2023-22785 · Archery · Archery

Name of the Vulnerable Software and Affected Versions: Archery affected versions not specified Description: The Archery project contains multiple SQL injection vulnerabilities that may allow an attacker to query the connected databases. User input coming from the db name in the sql/data...

Microsoft OLE DB Driver for SQL Server Installed (Windows)

Binary data microsoftoledbdriverforsqlserverwininstalled.nbin...

Microsoft ODBC Driver for SQL Server Installed (Windows)

Binary data microsoftodbcdriverforsqlserverwininstalled.nbin...

CVE-2023-28275

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2023-28275

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2023-23384

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-23384

Microsoft SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-28275 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-28275

Technical details about CVE-2023-28275 are not publicly provided in the supplied documents. Available references mention the vulnerability title, but no affected product/version, root cause, impact, or patch information in these sources. Monitor for updates.

CVE-2023-28275 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-23384 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2023-23384

CVE-2023-23384 is described in the connected documents as a Microsoft SQL Server remote code execution vulnerability reachable over the network. Nessus plugin entries for April 2023 (SMB_NT_MS23_APR_MSSQL_REMOTE.NASL and SMB_NT_MS23_APR_MSSQL.NASL) confirm a remote code execution issue, with self...

January 10, 2023—KB5022287 (OS Build 22000.1455)

None None...

January 10, 2023—KB5022289 (OS Build 14393.5648)

None None...

KB5021128 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: February 14, 2023

None None...

KB5021112 - Description of the security update for SQL Server 2008 R2 SP3 GDR: February 14, 2023

None None...

KB5021126 - Description of the security update for SQL Server 2017 CU31: February 14, 2023

None None...