1556 matches found
MS16-136: Description of the security update for SQL Server 2014 Service Pack 2 GDR: November 8, 2016
None None...
MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 CU: November 8, 2016
MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 CU: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or ...
PT-2016-7267
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter in the MDS API. This could enable an attacker to inject a client-side...
Microsoft SQL Server CVE-2016-7252 Information Disclosure Vulnerability
Description Microsoft SQL Server is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SQL Server 2016 for x64-based Systems Recommendations Block external access at...
Microsoft SQL Server CVE-2016-7253 Privilege Escalation Vulnerability
Description Microsoft SQL Server is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft SQL Server 2012 for 32-bit Systems Service Pack 2 Microsoft SQL Server 2012 for 32-bit Systems Service Pack 3 Microsof...
Microsoft SQL Server CVE-2016-7254 Privilege Escalation Vulnerability
Description Microsoft SQL Server is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft SQL Server 2012 for 32-bit Systems Service Pack 2 Microsoft SQL Server 2012 for 32-bit Systems Service Pack 3 Microsof...
Microsoft SQL Server Master Data Services CVE-2016-7251 Cross Site Scripting Vulnerability
Description Microsoft SQL Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Technologie...
Microsoft SQL Server CVE-2016-7249 Privilege Escalation Vulnerability
Description Microsoft SQL Server is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft SQL Server 2016 for x64-based Systems Recommendations Run all software as a nonprivileged user with minimal access...
KLA10901 Multiple vulnerabilities in Microsoft SQL Server
Multiple serious vulnerabilities have been found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to gain privileges or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper pointer casting handling can be exploited by remotely...
PT-2016-7265
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016 Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain privileges. An attacker could exploit this by accessing an affected SQL server database, potentially...
PT-2016-7266
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2014 SP1 through 2016 Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain elevated privileges. An attacker with access to an affected SQL server...
PT-2016-7270
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2012 SP2 through 2012 SP3 Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain elevated privileges. An attacker with access to an affected SQL server...
PT-2016-7269
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2012 SP2 through 2016 Description The issue arises from the SQL Server Agent's failure to properly check the atxcore.dll ACL, allowing remote authenticated users to gain privileges. An attacker could exploit this...
PT-2016-7268
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016 Description The issue is related to the improper handling of the FILESTREAM path in Microsoft SQL Analysis Services, which can lead to an information disclosure. This can be exploited by an attacker with access to an...
Microsoft SQL Server 2012 11.0.x.x < 11.0.3460.0 Multiple Vulnerabilities (2977325)
Binary data 9704.prm...
Microsoft SQL Server 2008 10.00.x.x < 10.00.5869.00 Multiple Vulnerabilities (2984340)
Binary data 9702.prm...
Microsoft SQL Server 2008 R2 10.50.x.x < 10.50.4321.00 Multiple Vulnerabilities (2977319)
Binary data 9703.prm...
Microsoft SQL Server 2014 12.0.x.x < 12.0.2381.0 Multiple Vulnerabilities (2977316)
Binary data 9705.prm...
Microsoft SQL Server Unquoted Service Path Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits Exploit Title: Microsoft SQL Server Unquoted Service Path Privilege Escalation Date: 10/142016 Author: Saeed Hasanzadeh Net.Hun73r Vendor Homepage: https://www.microsoft.com Software Link:...