Lucene search
+L

5255 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-67388: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

8.8CVSS6.4AI score0.00913EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-67643: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

9.8CVSS6.4AI score0.00974EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-66819: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.9AI score0.00987EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-87246

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00913EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•9 views

PT-2026-87942

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00819EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-77480: Insufficient Granularity of Access Control

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00778EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-87232

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00995EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-87250

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00974EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•9 views

PT-2026-87254

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00995EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-87568

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00942EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-87255

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00995EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-68776: Use of Uninitialized Resource

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00995EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-66816: Insufficient Logging

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network...

6.5CVSS5.8AI score0.00995EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-77485: Use After Free

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-68777: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00995EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•10 views

PT-2026-87943

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00778EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-66818: Improper Privilege Management

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00778EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-67368: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.01024EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/09/08 12:00 a.m.•27 views

KLA91271 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote...

9.8CVSS7AI score0.01174EPSS
SaveExploits0References72
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-87262

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00913EPSS
SaveExploits0References2
Rows per page
Query Builder