5498 matches found
PT-2026-87936
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network, which enables them to affect the system. Recommendations At the moment, there is no information...
PT-2026-87226
Name of the Vulnerable Software and Affected Versions SQL Server version 2025 Description A heap-based buffer overflow exists in SQL Server, which allows an authorized attacker to execute arbitrary code over a network by using a crafted query. A heap-based buffer overflow occurs when a program...
CVE-2026-67631: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...
PT-2026-87215
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements in output used by a downstream component injection allows an unauthorized attacker to elevate privileges over a network. When using SQL Copilot ...
CVE-2026-65669: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-77184: Improper Neutralization of Special Elements used in an SQL Command
In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...
CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added six flaws to its Known Exploited Vulnerabilities KEV catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScaler Gateway, citing evidence of active exploitation. The...
The vulnerability of the ODBC driver for SQL Server on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the ODBC driver for SQL Server on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account...
RockyLinux 9 : mysql:8.4 (RLSA-2026:56973)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56973 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-47064...
Microsoft SQL Server Backup Policy Retention: Behavior and Recommendations
Challenge When a Microsoft SQL Server Backup Policy fails consistently for an extended period, restore points created by that policy may be removed if the Remove deleted items data after option is enabled in that policy. Cause This behavior occurs because the Remove deleted items data after optio...
CVE-2026-22306
Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel...
EUVD-2026-62704
Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel...
PT-2026-78641
Name of the Vulnerable Software and Affected Versions Ozols Grupa OZOLS versions prior to 1.1.1233 Description The software contains a flaw in its automatic update channel, specifically affecting the OzolsSQL client update path, the serv update.vbs file, and the update SQL Server Agent job using...
EUVD-2024-55719
Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a path traversal sequence in the request URI to bypass the oauthservlet authentication filter. Attacke...
CVE-2024-58374: Improper Neutralization of Special Elements used in an SQL Command
Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a path traversal sequence in the request URI to bypass the oauthservlet authentication filter. Attacke...
VulnCheck KEV: CVE-2024-58374
Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a path traversal sequence in the request URI to bypass the oauthservlet authentication filter. Attacke...
PT-2026-71697
Name of the Vulnerable Software and Affected Versions Hongjing e-HR affected versions not specified Description An unauthenticated SQL injection exists in the 'getSdutyTree' servlet endpoint. Remote attackers can bypass the oauthservlet authentication filter by using a path traversal sequence in...
CVE-2026-19004
An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in...
CVE-2022-50997
Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...