KB4583462 - Description of the security update for SQL Server 2014 SP3 CU4: January 12, 2021

KB4583462 - Description of the security update for SQL Server 2014 SP3 CU4: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about...

KB4583461 - Description of the security update for SQL Server 2016 SP2 CU15: January 12, 2021

KB4583461 - Description of the security update for SQL Server 2016 SP2 CU15: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more abou...

KB4583463 - Description of the security update for SQL Server 2014 SP3 GDR: January 12, 2021

KB4583463 - Description of the security update for SQL Server 2014 SP3 GDR: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that may cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about t...

Vulnerability fixed in Microsoft SQL server

There is a vulnerability in Microsoft SQL Server. A authenticated malicious party can send data over a network to an affected SQL Server when it is configured to running an Extended Event session. SQL Server: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact...

KLA12043 PE vulnerability in Microsoft SQL Server

An elevation of privilege vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2021-1636 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-SQL-Server CVE list CVE-2021-1636...

Microsoft SQL Server SQL Injection Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A SQL injection vulnerability exists in Microsoft SQL Server. The following products and versions are affected:Microsoft SQL Server 2019 for x64-based Systems GDR,Microsoft SQL Server...

Protect your SQL Server on-premises, in Azure, and in multicloud

Azure Defender for SQL is now generally available for use with SQL Server on premises, in multicloud deployments on Amazon Web Services AWS, and Google Cloud Platform GCP, and in virtual machines on Azure. Azure Defender for SQL constantly monitors your SQL Server for known vulnerabilities and...

Protect your SQL Server on-premises, in Azure, and in multicloud

Azure Defender for SQL is now generally available for use with SQL Server on premises, in multicloud deployments on Amazon Web Services AWS, and Google Cloud Platform GCP, and in virtual machines on Azure. Azure Defender for SQL constantly monitors your SQL Server for known vulnerabilities and...

CVE-2019-19878

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358...

B&r Automation APROL Authorization Issues Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. An authorization issue vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to bypass authenticati...

MySQL Server DoS

The vulnerability of the MySQL Server component, specifically the stored procedures, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

XenDesktop 7.x: Database Sizing Tool

Created Date: 10th Nov 2014 Updated Date: 4th Aug 2017 Description The tool provides guidance on the expected size of the XenDesktop 7.x site and monitoring databases. The tool should be used a guide, rather than an exact sizing, as various factors on the SQL server can impact the size...

KB941203 - MS08-040: Vulnerabilities in Microsoft SQL Server could allow elevation of privilege

Resolves four privately disclosed vulnerabilities. The more serious of the vulnerabilities could allow an attacker to run code and to take complete control of the system.INTRODUCTIONMicrosoft has released security bulletin MS08-040. To view the complete security bulletin, visit one of the followi...

KB959420 - MS09-004: Vulnerabilities in Microsoft SQL Server could allow remote code execution

Resolves a vulnerability in SQL Server that could allow remote code execution if untrusted users have access to an affected system or if a SQL injection vulnerability exists on an affected system.INTRODUCTIONMicrosoft has released security bulletin MS09-004. To view the complete security bulletin...

KB2977325 - MS14-044: Description of the security update for SQL Server 2012 Service Pack 1 (QFE): August 12, 2014

KB2977325 - MS14-044: Description of the security update for SQL Server 2012 Service Pack 1 QFE: August 12, 2014 Introduction A security issue has been identified in Microsoft SQL Server 2012 Service Pack 1 that could allow an attacker to compromise your system and gain control over it. You can...

KB2494089 - MS11-049: Description of the security update for SQL Server 2008 Service Pack 2 GDR: June 14, 2011

KB2494089 - MS11-049: Description of the security update for SQL Server 2008 Service Pack 2 GDR: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-049. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home users:...

KB3045323 - MS15-058: Description of the security update for SQL Server 2014 QFE: July 14, 2015

KB3045323 - MS15-058: Description of the security update for SQL Server 2014 QFE: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed to execute a...

KB3045318 - MS15-058: Description of the security update for SQL Server 2012 SP1 GDR: July 14, 2015

KB3045318 - MS15-058: Description of the security update for SQL Server 2012 SP1 GDR: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed to execute a...

KB3045305 - MS15-058: Description of the security update for SQL Server 2008 Service Pack 3 GDR: July 14, 2015

KB3045305 - MS15-058: Description of the security update for SQL Server 2008 Service Pack 3 GDR: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed t...

KB3045319 - MS15-058: Description of the security update for SQL Server 2012 Service Pack 2 QFE: July 14, 2015

KB3045319 - MS15-058: Description of the security update for SQL Server 2012 Service Pack 2 QFE: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed t...