CVE-2024-37340

CVE-2024-37340 is a Microsoft SQL Server Native Scoring remote code execution vulnerability. Connected sources confirm affected component scope relates to SQL Server with Machine Learning/Native Scoring functionality and indicate a fix was released in the September 2024 updates. Microsoft’s KB504...

CVE-2024-37335 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-37966 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...

CVE-2024-37966

CVE-2024-37966 is a Microsoft SQL Server Native Scoring information disclosure vulnerability. Public docs identify it as an information disclosure issue in the SQL Server Native Scoring component, with the vulnerability enabling an attacker to access sensitive data. The connected update reference...

CVE-2024-37966 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...

CVE-2024-37338

CVE-2024-37338 is a remote code execution vulnerability in Microsoft SQL Server (Machine Learning/Native Scoring components) that can be exploited over the network without user interaction. The CVSS v3.1 base score is 8.8 (HIGH) with RCE, requiring LOW privileges and network access; impact is hig...

EUVD-2024-37037

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-37338 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-37338 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

KB5046059 - Description of the security update for SQL Server 2022 CU15: October 8, 2024

KB5046059 - Description of the security update for SQL Server 2022 CU15: October 8, 2024 Summary Improvements and fixes included in this update How to obtain and install the update How to obtain or download the latest cumulative update package for Linux More information File information Informati...

KB5042215 - Description of the security update for SQL Server 2017 CU31: September 10, 2024

KB5042215 - Description of the security update for SQL Server 2017 CU31: September 10, 2024 Summary Known issues in this update Improvements and fixes included in this update How to obtain and install the update How to obtain or download the latest cumulative update package for Linux More...

Microsoft SQL Server Information Disclosure Vulnerability

...

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

PT-2024-6359 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to errors in numerical truncation in the Microsoft SQL Server system, which can allow a remote attacker to gain unauthorized access to protected informatio...

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

Microsoft SQL Server 缓冲区错误漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A buffer error vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could gain access to sensitive information. The following products...

Microsoft SQL Server 访问控制错误漏洞

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrar...

PT-2024-6357 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server versions prior to 13.0.7045.2 Microsoft SQL Server versions prior to 13.0.6450.1 Microsoft SQL Server versions prior to 15.0.4395.2 Microsoft SQL Server versions prior to 15.0.2125.1 Microsoft SQL Server versions prior to...

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrar...