Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftSql Server

236 matches found

CVE
CVE•added 2024/04/09 5:15 p.m.•225 views

CVE-2024-28937

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02197EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•224 views

CVE-2024-37334

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02427EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•221 views

CVE-2024-29045

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

7.5CVSS8AI score0.01789EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•216 views

CVE-2024-28933

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01752EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•215 views

CVE-2024-28914

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.0298EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•210 views

CVE-2024-28936

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01854EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•209 views

CVE-2024-28941

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02197EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•205 views

CVE-2024-28915

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.03005EPSS
CVE
CVE•added 2014/08/12 9:55 p.m.•202 views

CVE-2014-4061

Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated users to cause a denial of service (daemon hang) via a crafted T-SQL statement, aka "Microsoft SQL Server Stack Overrun Vu...

6.8CVSS6.6AI score0.33911EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•199 views

CVE-2024-28913

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.0298EPSS
CVE
CVE•added 2016/11/10 7:0 a.m.•195 views

CVE-2016-7254

Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, aka "SQL RDBMS Engine Elevation of Privilege Vulnerability."

8.8CVSS8.6AI score0.16567EPSS
CVE
CVE•added 2024/04/09 5:16 p.m.•191 views

CVE-2024-29984

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.0298EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•188 views

CVE-2024-28944

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02618EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•186 views

CVE-2024-28940

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•185 views

CVE-2024-29044

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•180 views

CVE-2024-28934

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02197EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•177 views

CVE-2024-28926

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•177 views

CVE-2024-29043

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.0396EPSS
CVE
CVE•added 2024/09/10 5:15 p.m.•171 views

CVE-2024-26186

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11235EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•170 views

CVE-2024-28908

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.0298EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•170 views

CVE-2024-28939

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01385EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•168 views

CVE-2024-28909

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.0298EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•167 views

CVE-2024-28927

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•166 views

CVE-2024-28938

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02197EPSS
CVE
CVE•added 2024/04/09 5:16 p.m.•165 views

CVE-2024-29982

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.0298EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•164 views

CVE-2024-28932

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.03124EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•162 views

CVE-2024-29046

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•161 views

CVE-2024-28935

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02197EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•161 views

CVE-2024-28942

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.0252EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•159 views

CVE-2024-28910

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.03446EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•159 views

CVE-2024-28912

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02234EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•156 views

CVE-2024-20701

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•154 views

CVE-2024-21303

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•154 views

CVE-2024-28945

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01782EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•153 views

CVE-2024-29047

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02344EPSS
CVE
CVE•added 2011/06/16 8:55 p.m.•152 views

CVE-2011-1280

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

4.3CVSS7AI score0.33585EPSS
Web
CVE
CVE•added 2004/09/01 4:0 a.m.•151 views

CVE-2002-1123

Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.

7.5CVSS8AI score0.89144EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•148 views

CVE-2024-37336

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.02362EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•143 views

CVE-2024-38087

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.05325EPSS
CVE
CVE•added 2008/12/10 2:0 p.m.•133 views

CVE-2008-5416

Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2...

9CVSS7.8AI score0.89069EPSS
Web
CVE
CVE•added 2009/10/14 10:30 a.m.•133 views

CVE-2009-2528

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."

9.3CVSS7.2AI score0.43234EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•122 views

CVE-2024-37331

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•121 views

CVE-2024-37323

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.01767EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•121 views

CVE-2024-37332

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.02955EPSS
CVE
CVE•added 2009/10/14 10:30 a.m.•119 views

CVE-2009-2500

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office ...

9.3CVSS7.9AI score0.54154EPSS
CVE
CVE•added 2009/10/14 10:30 a.m.•119 views

CVE-2009-3126

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office ...

9.3CVSS9.7AI score0.48214EPSS
CVE
CVE•added 2024/11/12 6:15 p.m.•117 views

CVE-2024-49021

Microsoft SQL Server Remote Code Execution Vulnerability

7.8CVSS8AI score0.00689EPSS
CVE
CVE•added 2002/07/23 4:0 a.m.•116 views

CVE-2002-0643

The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQ...

4.6CVSS6.8AI score0.00815EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•116 views

CVE-2024-37330

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2008/09/11 1:1 a.m.•115 views

CVE-2007-5348

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 20...

9.3CVSS8AI score0.76417EPSS
Total number of security vulnerabilities236