3852 matches found
CVE-2026-35229: Improper Access Control
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.30 and 21.3-21.21. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability...
CVE-2026-34312: Improper Access Control
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.30. Easily exploitable vulnerability allows high privileged attacker having Row Access Method privilege with network access via multiple protocols to compromise RDBMS. Successful attac...
CVE-2026-32167
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server Privilege Escalation
The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2026-33120
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-32176 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-32176
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-32167
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-32167 SQL Server Elevation of Privilege Vulnerability
...
KB5084815 - Description of the security update for SQL Server 2022 GDR: April 14, 2026
None None...
KB5084821 - Description of the security update for SQL Server 2016 SP3 GDR: April 14, 2026
None None...
PT-2026-32881
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2022 GDR versions 16.0.0 through 16.0.1175.0 Description Untrusted pointer dereference allows an authorized attacker to execute arbitrary code over a network by triggering invalid memory access. Recommendations Update to...
PT-2026-32835
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements used in an sql command SQL injection allows an authorized attacker to elevate privileges locally. SQL injection is a technique where an attacker...
Photon OS 4.0: Mysql PHSA-2026-4.0-0991
An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0991. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-26116
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
SQLBot security vulnerability
SQLBot is an intelligent data querying system developed by DataEase, based on large models and RAG techniques. Versions of SQLBot 1.5.0 and earlier contained security vulnerabilities. These vulnerabilities were caused by storage-based prompt injection attacks, which could allow attackers to hijac...
EUVD-2026-10569
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-10570
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
