Sql Server Security Vulnerabilities and Issues — Page 3 of Sql Server CVE List

Lucene search

MicrosoftSql Server

231 matches found

CVE•added 2008/09/11 1:1 a.m.•114 views

CVE-2007-5348

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 20...

9.3CVSS8AI score0.76417EPSS

CVE•added 2024/07/09 5:15 p.m.•114 views

CVE-2024-37318

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.10421EPSS

CVE•added 2024/07/09 5:15 p.m.•114 views

CVE-2024-37326

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.10421EPSS

CVE•added 2024/07/09 5:15 p.m.•114 views

CVE-2024-37333

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.10421EPSS

CVE•added 2024/07/09 5:15 p.m.•113 views

CVE-2024-35272

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.10421EPSS

CVE•added 2024/11/12 6:15 p.m.•113 views

CVE-2024-49004

SQL Server Native Client Remote Code Execution Vulnerability

8.8CVSS9AI score0.04009EPSS

CVE•added 2024/07/09 5:15 p.m.•112 views

CVE-2024-21449

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.07952EPSS

CVE•added 2024/07/09 5:15 p.m.•110 views

CVE-2024-21308

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.06873EPSS

CVE•added 2024/07/09 5:15 p.m.•110 views

CVE-2024-37327

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.10421EPSS

CVE•added 2024/11/12 6:15 p.m.•110 views

CVE-2024-43462

SQL Server Native Client Remote Code Execution Vulnerability

8.8CVSS9AI score0.04009EPSS

CVE•added 2024/07/09 5:15 p.m.•109 views

CVE-2024-37324

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.10421EPSS

CVE•added 2024/07/09 5:15 p.m.•108 views

CVE-2024-21317

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.06873EPSS

CVE•added 2024/07/09 5:15 p.m.•108 views

CVE-2024-35256

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.10421EPSS

CVE•added 2024/07/09 5:15 p.m.•107 views

CVE-2024-21335

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.05182EPSS

CVE•added 2024/07/09 5:15 p.m.•107 views

CVE-2024-37322

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.07952EPSS

CVE•added 2024/07/09 5:15 p.m.•107 views

CVE-2024-37328

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.07952EPSS

CVE•added 2024/07/09 5:15 p.m.•106 views

CVE-2024-37329

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.07952EPSS

CVE•added 2009/10/14 10:30 a.m.•105 views

CVE-2009-2501

Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP...

9.3CVSS9.7AI score0.42403EPSS

CVE•added 2000/07/12 4:0 a.m.•104 views

CVE-2000-0402

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.

2.1CVSS7AI score0.74859EPSS

CVE•added 2024/07/09 5:15 p.m.•104 views

CVE-2024-21332

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.06873EPSS

CVE•added 2024/07/09 5:15 p.m.•104 views

CVE-2024-37320

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.07952EPSS

CVE•added 2024/07/09 5:15 p.m.•101 views

CVE-2024-37321

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.07952EPSS

CVE•added 2024/07/09 5:15 p.m.•98 views

CVE-2024-21331

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.06873EPSS

CVE•added 2024/07/09 5:15 p.m.•98 views

CVE-2024-21428

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.05554EPSS

CVE•added 2009/10/14 10:30 a.m.•97 views

CVE-2009-2502

Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office E...

9.3CVSS9.7AI score0.42434EPSS

CVE•added 2008/07/08 11:41 p.m.•96 views

CVE-2008-0106

Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.

9CVSS7.2AI score0.72626EPSS

CVE•added 2024/07/09 5:15 p.m.•96 views

CVE-2024-21333

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.05182EPSS

CVE•added 2024/07/09 5:15 p.m.•96 views

CVE-2024-21414

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.06624EPSS

CVE•added 2024/07/09 5:15 p.m.•96 views

CVE-2024-35271

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.10421EPSS

CVE•added 2024/09/10 5:15 p.m.•95 views

CVE-2024-43474

Microsoft SQL Server Information Disclosure Vulnerability

7.6CVSS7.5AI score0.10205EPSS

CVE•added 2008/07/08 11:41 p.m.•94 views

CVE-2008-0086

Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.

9CVSS7.2AI score0.73361EPSS

CVE•added 2008/09/11 1:11 a.m.•94 views

CVE-2008-3013

gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, S...

9.3CVSS7.7AI score0.74609EPSS

CVE•added 2024/09/10 5:15 p.m.•94 views

CVE-2024-37340

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11235EPSS

CVE•added 2024/11/12 6:15 p.m.•93 views

CVE-2024-49001

SQL Server Native Client Remote Code Execution Vulnerability

8.8CVSS9AI score0.04009EPSS

CVE•added 2024/07/09 5:15 p.m.•92 views

CVE-2024-28928

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.05182EPSS

CVE•added 2024/09/10 5:15 p.m.•92 views

CVE-2024-37980

Microsoft SQL Server Elevation of Privilege Vulnerability

9.8CVSS9.1AI score0.07533EPSS

CVE•added 2024/07/09 5:15 p.m.•89 views

CVE-2024-21373

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.05182EPSS

CVE•added 2024/07/09 5:15 p.m.•89 views

CVE-2024-21398

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.05182EPSS

CVE•added 2024/07/09 5:15 p.m.•89 views

CVE-2024-21415

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.06873EPSS

CVE•added 2008/09/11 1:11 a.m.•86 views

CVE-2008-3014

Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital ...

9.3CVSS7.8AI score0.71547EPSS

CVE•added 2008/07/08 11:41 p.m.•85 views

CVE-2008-0107

Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrar...

9CVSS7.2AI score0.57271EPSS

CVE•added 2024/11/12 6:15 p.m.•85 views

CVE-2024-49008

SQL Server Native Client Remote Code Execution Vulnerability

8.8CVSS9AI score0.04009EPSS

CVE•added 2009/10/14 10:30 a.m.•83 views

CVE-2009-2503

GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Of...

9.3CVSS9.6AI score0.41156EPSS

CVE•added 2024/07/09 5:15 p.m.•83 views

CVE-2024-21425

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.06873EPSS

CVE•added 2024/11/12 6:15 p.m.•83 views

CVE-2024-49015

SQL Server Native Client Remote Code Execution Vulnerability

8.8CVSS9AI score0.04009EPSS

CVE•added 2024/11/12 6:15 p.m.•83 views

CVE-2024-49043

Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00231EPSS

CVE•added 2009/10/14 10:30 a.m.•81 views

CVE-2009-2504

Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project...

9.3CVSS9.7AI score0.46054EPSS

CVE•added 2024/11/12 6:15 p.m.•80 views

CVE-2024-49009

SQL Server Native Client Remote Code Execution Vulnerability

8.8CVSS9AI score0.04009EPSS

CVE•added 2007/09/11 7:17 p.m.•79 views

CVE-2007-4814

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.

7.5CVSS8AI score0.45296EPSS

CVE•added 2024/11/12 6:15 p.m.•79 views

CVE-2024-48994

SQL Server Native Client Remote Code Execution Vulnerability

8.8CVSS9AI score0.05345EPSS

Total number of security vulnerabilities231