Description of the security update for Power BI Report Server (May 2020): March 9, 2021 (KB5001284)

Description of the security update for Power BI Report Server May 2020: March 9, 2021 KB5001284 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploits this vulnerability could...

Vulnerability fixed in Microsoft SQL Server

A vulnerability has been fixed in the Microsoft SQL product group. Server. The vulnerability is in the Power BI application. The vulnerability enables an authenticated remote malicious person to able to obtain sensitive information. Power BI:...

KLA12113 OSI vulnerability in Microsoft SQL Server

An information disclosure vulnerability was found in Microsoft SQL Serverl. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-26859 Exploitation Related products Microsoft-Power-BI CVE list CVE-2021-26859 critical KB list 5001285 5001284...

How to repair suspect database in SQL Server

By Waqas Programs work with databases, and if the database crashes essential information can be lost and this will be disastrous to the user. So what are your options? This is a post from HackRead.com Read the original post: How to repair suspect database in SQL Server...

Exploit for CVE-2019-1068

CVE-2019-1068 Root cause analysis and PoC for a Microsoft SQL...

CVE-2021-25275: Use of Hard-coded Credentials

SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login...

How to Migrate a Provisioning Services Database to a New SQL Server

This article will cover the steps necessary to migrate an existing PVS database to a new database on an existing SQL server or to a new database on a new SQL server...

Security Updates for Microsoft SQL Server (January 2021)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability. An authenticated, remote attacker can exploit this issue, to gain elevated privileges. Note that Nessus has not tested for this issue but h...

Patch Tuesday - January 2021

We arrive at the first Patch Tuesday of 2021 2021-Jan with 83 vulnerabilities across our standard spread of products. Windows Operating System vulnerabilities dominated this month's advisories, followed by Microsoft Office which includes the SharePoint family of products, and lastly some from les...

KB4583458 - Description of the security update for SQL Server 2019 GDR: January 12, 2021

KB4583458 - Description of the security update for SQL Server 2019 GDR: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about the...

KB4583457 - Description of the security update for SQL Server 2017 CU22: January 12, 2021

KB4583457 - Description of the security update for SQL Server 2017 CU22: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about th...

KB4583456 - Description of the security update for SQL Server 2017 GDR: January 12, 2021

KB4583456 - Description of the security update for SQL Server 2017 GDR: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about the...

KB4583462 - Description of the security update for SQL Server 2014 SP3 CU4: January 12, 2021

KB4583462 - Description of the security update for SQL Server 2014 SP3 CU4: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about...

KB4583459 - Description of the security update for SQL Server 2019 CU8: January 12, 2021

KB4583459 - Description of the security update for SQL Server 2019 CU8: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about the...

KB4583465 - Description of the security update for SQL Server 2012 SP4 GDR: January 12, 2021

KB4583465 - Description of the security update for SQL Server 2012 SP4 GDR: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about...

KB4583463 - Description of the security update for SQL Server 2014 SP3 GDR: January 12, 2021

KB4583463 - Description of the security update for SQL Server 2014 SP3 GDR: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that may cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about t...

KB4583460 - Description of the security update for SQL Server 2016 SP2 GDR: January 12, 2021

KB4583460 - Description of the security update for SQL Server 2016 SP2 GDR: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about...

KB4583461 - Description of the security update for SQL Server 2016 SP2 CU15: January 12, 2021

KB4583461 - Description of the security update for SQL Server 2016 SP2 CU15: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more abou...

Microsoft SQL Server SQL Injection Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A SQL injection vulnerability exists in Microsoft SQL Server. The following products and versions are affected:Microsoft SQL Server 2019 for x64-based Systems GDR,Microsoft SQL Server...

KLA12043 PE vulnerability in Microsoft SQL Server

An elevation of privilege vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2021-1636 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-SQL-Server CVE list CVE-2021-1636...