CVE-2023-21713: Deserialization of Untrusted Data

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-21705: Use of Hard-coded Cryptographic Key

Microsoft SQL Server Remote Code Execution Vulnerability...

KLA20235 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SQL Server...

CVE-2023-21528: Heap-based Buffer Overflow

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-21568: Deserialization of Untrusted Data

Microsoft SQL Server Integration Service VS extension Remote Code Execution Vulnerability...

KLA20230 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SQL Server can be exploited remotely t...

CVE-2023-21681

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2022-44015

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can inject raw SQL queries. By activating MSSQL features, the attacker is able to execute arbitrary commands on the MSSQL server via the xpcmdshell extended procedure...

CVE-2022-44014

An issue was discovered in Simmeth Lieferantenmanager before 5.6. In the design of the API, a user is inherently able to fetch arbitrary SQL tables. This leaks all user passwords and MSSQL hashes via /DS/LMAPI/api/SelectionService/GetPaggedTab...

Simmeth System Supplier Manager SQL注入漏洞

Simmeth System Supplier Manager is a supply chain software from Simmeth System GmbH, Germany.A SQL injection vulnerability exists in versions prior to Simmeth System GmbH Supplier Manager 5.6. The vulnerability stems from the application's lack of validation of externally entered SQL statements,...

Microsoft SQL Server DB Compliance Checks

Binary data mssqldbcompliancecheck.nbin...

Description of the security update for SharePoint Foundation 2013: October 11, 2022 (KB5002284)

Description of the security update for SharePoint Foundation 2013: October 11, 2022 KB5002284 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common...

EUVD-2022-38709

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

Security Updates for Microsoft SQL Server (June 2022)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CVE-2022-29143

Microsoft SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2022-29143 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2022-29143

CVE-2022-29143 describes a remote code execution vulnerability in Microsoft SQL Server where a specially crafted query against a table with a Column Store index can corrupt memory. Public details in the connected sources indicate exploitation could occur through authenticated access over network,...

CVE-2022-29143: Undefined Security Weakness

Microsoft SQL Server Remote Code Execution Vulnerability...

Vulnerability fixed in Microsoft SQL Server

A vulnerability has been fixed in Microsoft SQL Server. The vulnerability allows an authenticated malicious person to execute arbitrary code, possibly as a Database Administrator, by executing a specially prepared query via the $ partition on a table where a Column Store index is present. Abuse o...