5667 matches found
KB3194720 - MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 GDR: November 8, 2016
KB3194720 - MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 GDR: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create...
MS16-136: Description of the security update for SQL Server 2014 Service Pack 2 CU: November 8, 2016
None None...
MS16-136: Description of the security update for SQL Server 2012 Service Pack 3 GDR: November 8, 2016
MS16-136: Description of the security update for SQL Server 2012 Service Pack 3 GDR: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or...
MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 CU: November 8, 2016
MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 CU: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or ...
MDS API XSS Vulnerability
A cross-site scripting vulnerability exists in SQL Server MDS that could allow an attacker to inject a client-side script into the user's browser instance. The vulnerability is caused when the SQL Server MDS does not properly validate a request parameter on the SQL Server site. The script could...
SQL RDBMS Engine Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly handles pointer casting. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited this vulnerability...
SQL RDBMS Engine Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly handles pointer casting. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited this vulnerability...
Microsoft SQL Server Agent Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft SQL Server Engine when SQL Server Agent incorrectly checks ACLs on atxcore.dll. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully...
Microsoft SQL Server Analysis Services Information Disclosure Vulnerability
An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces permissions. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited the...
KB3194716 - MS16-136: Description of the security update for SQL Server 2016 GDR: November 8, 2016
KB3194716 - MS16-136: Description of the security update for SQL Server 2016 GDR: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or to...
MS16-136: Description of the security update for SQL Server 2014 Service Pack 2 GDR: November 8, 2016
None None...
KB3194725 - MS16-136: Description of the security update for SQL Server 2012 Service Pack 2 CU: November 8, 2016
KB3194725 - MS16-136: Description of the security update for SQL Server 2012 Service Pack 2 CU: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create...
KB3194724 - MS16-136: Description of the security update for SQL Server 2012 Service Pack 3 CU: November 8, 2016
KB3194724 - MS16-136: Description of the security update for SQL Server 2012 Service Pack 3 CU: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create...
Microsoft SQL Server CVE-2016-7252 Information Disclosure Vulnerability
Description Microsoft SQL Server is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SQL Server 2016 for x64-based Systems Recommendations Block external access at...
Microsoft SQL Server Master Data Services CVE-2016-7251 Cross Site Scripting Vulnerability
Description Microsoft SQL Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Technologie...
Microsoft SQL Server CVE-2016-7253 Privilege Escalation Vulnerability
Description Microsoft SQL Server is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft SQL Server 2012 for 32-bit Systems Service Pack 2 Microsoft SQL Server 2012 for 32-bit Systems Service Pack 3 Microsof...
PT-2016-7267
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter in the MDS API. This could enable an attacker to inject a client-side...
PT-2016-7265
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016 Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain privileges. An attacker could exploit this by accessing an affected SQL server database, potentially...
Microsoft SQL Server CVE-2016-7254 Privilege Escalation Vulnerability
Description Microsoft SQL Server is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft SQL Server 2012 for 32-bit Systems Service Pack 2 Microsoft SQL Server 2012 for 32-bit Systems Service Pack 3 Microsof...
Microsoft SQL Server CVE-2016-7250 Privilege Escalation Vulnerability
Description Microsoft SQL Server is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft SQL Server 2014 for 32-bit Systems Service Pack 1 Microsoft SQL Server 2014 for 32-bit Systems Service Pack 2 Microsof...