KB2494113 - MS11-049: Description of the security update for SQL Server 2005 Service Pack 3 GDR: June 14, 2011

KB2494113 - MS11-049: Description of the security update for SQL Server 2005 Service Pack 3 GDR: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-049. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

KB2494096 - MS11-049: Description of the security update for SQL Server 2008 Service Pack 1 GDR: June 14, 2011

KB2494096 - MS11-049: Description of the security update for SQL Server 2008 Service Pack 1 GDR: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-049. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

KB2494086 - MS11-049: Description of the security update for SQL Server 2008 R2 QFE: June 14, 2011

KB2494086 - MS11-049: Description of the security update for SQL Server 2008 R2 QFE: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-049. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

KB2494089 - MS11-049: Description of the security update for SQL Server 2008 Service Pack 2 GDR: June 14, 2011

KB2494089 - MS11-049: Description of the security update for SQL Server 2008 Service Pack 2 GDR: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-049. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home users:...

KB2494088 - MS11-049: Description of the security update for SQL Server 2008 R2 GDR: June 14, 2011

KB2494088 - MS11-049: Description of the security update for SQL Server 2008 R2 GDR: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-049. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

KB3045303 - MS15-058: Description of the security update for SQL Server 2008 Service Pack 3 QFE: July 14, 2015

KB3045303 - MS15-058: Description of the security update for SQL Server 2008 Service Pack 3 QFE: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed t...

KB3045308 - MS15-058: Description of the security update for SQL Server 2008 Service Pack 4 QFE: July 14, 2015

KB3045308 - MS15-058: Description of the security update for SQL Server 2008 Service Pack 4 QFE: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed t...

KB3045311 - MS15-058: Description of the security update for SQL Server 2008 Service Pack 4 GDR: July 14, 2015

KB3045311 - MS15-058: Description of the security update for SQL Server 2008 Service Pack 4 GDR: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed t...

KB3045305 - MS15-058: Description of the security update for SQL Server 2008 Service Pack 3 GDR: July 14, 2015

KB3045305 - MS15-058: Description of the security update for SQL Server 2008 Service Pack 3 GDR: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed t...

KB2977325 - MS14-044: Description of the security update for SQL Server 2012 Service Pack 1 (QFE): August 12, 2014

KB2977325 - MS14-044: Description of the security update for SQL Server 2012 Service Pack 1 QFE: August 12, 2014 Introduction A security issue has been identified in Microsoft SQL Server 2012 Service Pack 1 that could allow an attacker to compromise your system and gain control over it. You can...

List of the bugs that are fixed in SQL Server 2008 Service Pack 1

List of the bugs that are fixed in SQL Server 2008 Service Pack 1 INTRODUCTION This article lists the bugs that are fixed in Microsoft SQL Server 2008 Service Pack 1 SP1. Notes Other fixes that are not documented may be included in the service pack. This list will be updated when more articles ar...

Microsoft SQL Server Reporting Services 2016 ViewState deserialization vulnerability

Added: 09/25/2020 CVE: CVE-2020-0618 Background Microsoft SQL Server Reporting Services is a set of tools and services for creating, deploying, and managing mobile and paginated reports. Problem A deserialization vulnerability in Microsoft SQL Server Reporting Services 2016 allows a remote,...

Microsoft SQL Server Reporting Services 2016 ViewState deserialization vulnerability

Added: 09/25/2020 CVE: CVE-2020-0618 Background Microsoft SQL Server Reporting Services is a set of tools and services for creating, deploying, and managing mobile and paginated reports. Problem A deserialization vulnerability in Microsoft SQL Server Reporting Services 2016 allows a remote,...

Microsoft SQL Server Reporting Services 2016 ViewState deserialization vulnerability

Added: 09/25/2020 CVE: CVE-2020-0618 Background Microsoft SQL Server Reporting Services is a set of tools and services for creating, deploying, and managing mobile and paginated reports. Problem A deserialization vulnerability in Microsoft SQL Server Reporting Services 2016 allows a remote,...

Microsoft SQL Server Reporting Services 2016 - Remote Code Execution Exploit

Exploit Title: Microsoft SQL Server Reporting Services 2016 - Remote Code Execution Google Dork: inurl:ReportViewer.aspx Exploit Author: West Shepherd Vendor Homepage: https://www.microsoft.com Version: Microsoft SQL Server 2016 32-bit/x64 SP2 CU/GDR, Microsoft SQL Server 2014 32-bit/x64 SP3...

Microsoft SQL Server Reporting Services 2016 Remote Code Execution

Exploit Title: Microsoft SQL Server Reporting Services 2016 - Remote Code Execution Google Dork: inurl:ReportViewer.aspx Date: 2020-09-17 Exploit Author: West Shepherd Vendor Homepage: https://www.microsoft.com Version: Microsoft SQL Server 2016 32-bit/x64 SP2 CU/GDR, Microsoft SQL Server 2014...

Microsoft SQL Server Reporting Services 2016 - Remote Code Execution

Exploit Title: Microsoft SQL Server Reporting Services 2016 - Remote Code Execution Google Dork: inurl:ReportViewer.aspx Date: 2020-09-17 Exploit Author: West Shepherd Vendor Homepage: https://www.microsoft.com Version: Microsoft SQL Server 2016 32-bit/x64 SP2 CU/GDR, Microsoft SQL Server 2014...

Security feature bypass

A security feature bypass vulnerability exists in SQL Server Reporting Services SSRS when the server improperly validates attachments uploaded to reports. An attacker who successfully exploited this vulnerability could upload file types that were disallowed by an administrator. To exploit the...

CVE-2020-1044

CVE-2020-1044 is a security feature bypass in Microsoft SQL Server Reporting Services (SSRS) where the server incorrectly validates attachments uploaded to reports. An authenticated attacker can exploit this by sending a specially crafted request to an affected SSRS server, enabling upload of fil...

CVE-2020-1044 SQL Server Reporting Services Security Feature Bypass Vulnerability

...