CVE Daily – Microsoft SQL Server https://cvedaily.com/pages/tags/mssqlserver.html CVE Daily – Microsoft SQL Server en Wed, 03 Jun 2026 21:26:35 +0000 [Critical] CVE-2026-25879 – Langroid is a framework for building large-language-model-powered applications. ... https://nvd.nist.gov/vuln/detail/CVE-2026-25879 https://nvd.nist.gov/vuln/detail/CVE-2026-25879 Mon, 01 Jun 2026 23:16:21 +0000 Critical CVE-2026-25879

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent executes SQL produced by an LLM, which is influenceable by prompt injection. When configured with a database role that has privileges enabling code execution or filesystem access (e.g., PostgreSQL pg_execute_server_program, MySQL FILE, MSSQL xp_cmdshell), an attacker who can shape…

CVSS: 9.8 · CWE: CWE-89

View on NVD

]]> [Critical] CVE-2026-45721 – Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Alg... https://nvd.nist.gov/vuln/detail/CVE-2026-45721 https://nvd.nist.gov/vuln/detail/CVE-2026-45721 Tue, 26 May 2026 17:16:47 +0000 Critical CVE-2026-45721

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks upward through parent directories — past the configured server root — looking for a file named handler.lua to execute as the request handler. The loop terminates only after 100 ancestor steps or when filepath.Dir returns…

CVSS: 9.0 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-44680 – MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and ... https://nvd.nist.gov/vuln/detail/CVE-2026-44680 https://nvd.nist.gov/vuln/detail/CVE-2026-44680 Tue, 26 May 2026 17:16:46 +0000 High CVE-2026-44680

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to @mikro-orm/knex 6.6.14 and @mikro-orm/sql 7.0.14, MikroORM's identifier-quoting helper (Platform.quoteIdentifier and the postgres/mssql overrides) and its JSON-path emitters (Platform.getSearchJsonPropertyKey, quoteJsonKey) did not properly escape characters that delimit the SQL identif…

CVSS: 7.6 · CWE: CWE-89

View on NVD

]]> [High] CVE-2026-40370 – External control of file name or path in SQL Server allows an authorized attacke... https://nvd.nist.gov/vuln/detail/CVE-2026-40370 https://nvd.nist.gov/vuln/detail/CVE-2026-40370 Tue, 12 May 2026 18:17:16 +0000 High CVE-2026-40370

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-73

View on NVD

]]> [Medium] CVE-2026-6093 – Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQ... https://nvd.nist.gov/vuln/detail/CVE-2026-6093 https://nvd.nist.gov/vuln/detail/CVE-2026-6093 Mon, 11 May 2026 16:17:36 +0000 Medium CVE-2026-6093

Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8.

CVSS: 6.0 · CWE: CWE-89

View on NVD

]]> [High] CVE-2026-33120 – Untrusted pointer dereference in SQL Server allows an authorized attacker to exe... https://nvd.nist.gov/vuln/detail/CVE-2026-33120 https://nvd.nist.gov/vuln/detail/CVE-2026-33120 Tue, 14 Apr 2026 18:17:34 +0000 High CVE-2026-33120

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-822

View on NVD

]]> [Medium] CVE-2026-32176 – Improper neutralization of special elements used in an sql command ('sql injecti... https://nvd.nist.gov/vuln/detail/CVE-2026-32176 https://nvd.nist.gov/vuln/detail/CVE-2026-32176 Tue, 14 Apr 2026 18:17:20 +0000 Medium CVE-2026-32176

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS: 6.7 · CWE: CWE-89

View on NVD

]]> [Medium] CVE-2026-32167 – Improper neutralization of special elements used in an sql command ('sql injecti... https://nvd.nist.gov/vuln/detail/CVE-2026-32167 https://nvd.nist.gov/vuln/detail/CVE-2026-32167 Tue, 14 Apr 2026 18:17:19 +0000 Medium CVE-2026-32167

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS: 6.7 · CWE: CWE-89

View on NVD

]]> [Critical] CVE-2025-14816 – Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi El... https://nvd.nist.gov/vuln/detail/CVE-2025-14816 https://nvd.nist.gov/vuln/detail/CVE-2025-14816 Wed, 08 Apr 2026 14:16:24 +0000 Critical CVE-2025-14816

Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric AnalytiX versions 10.97.3 and prior, Mitsubishi Electric GENESIS versi…

CVSS: 9.3 · CWE: CWE-317

View on NVD

]]> [Critical] CVE-2025-14815 – Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric ... https://nvd.nist.gov/vuln/detail/CVE-2025-14815 https://nvd.nist.gov/vuln/detail/CVE-2025-14815 Wed, 08 Apr 2026 14:16:24 +0000 Critical CVE-2025-14815

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric AnalytiX versions 10.97.3 and prior, Mitsubishi Electric GENESIS versions 11.…

CVSS: 9.3 · CWE: CWE-312

View on NVD

]]> [Medium] CVE-2026-33375 – The Grafana MSSQL data source plugin contains a logic flaw that allows a low-pri... https://nvd.nist.gov/vuln/detail/CVE-2026-33375 https://nvd.nist.gov/vuln/detail/CVE-2026-33375 Thu, 26 Mar 2026 21:17:05 +0000 Medium CVE-2026-33375

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.

CVSS: 6.5 · CWE: CWE-400

View on NVD

]]> [Medium] CVE-2019-25598 – HeidiSQL Portable 10.1.0.5464 contains a denial of service vulnerability that al... https://nvd.nist.gov/vuln/detail/CVE-2019-25598 https://nvd.nist.gov/vuln/detail/CVE-2019-25598 Sun, 22 Mar 2026 14:16:26 +0000 Medium CVE-2019-25598

HeidiSQL Portable 10.1.0.5464 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the password field. Attackers can paste a buffer overflow payload into the password input during Microsoft SQL Server login to trigger an application crash.

CVSS: 6.2 · CWE: CWE-787

View on NVD

]]> [High] CVE-2025-58112 – Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allow... https://nvd.nist.gov/vuln/detail/CVE-2025-58112 https://nvd.nist.gov/vuln/detail/CVE-2025-58112 Wed, 18 Mar 2026 19:16:03 +0000 High CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized reports via raw SQL queries in an upload of a .rdl (Report Definition Language) file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting Services Reports can upload a malicious rdl file. If the malicious rdl file is already loaded and…

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2026-32628 – AnythingLLM is an application that turns pieces of content into context that any... https://nvd.nist.gov/vuln/detail/CVE-2026-32628 https://nvd.nist.gov/vuln/detail/CVE-2026-32628 Mon, 16 Mar 2026 14:19:40 +0000 High CVE-2026-32628

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected databases. The getTableSchemaSql() method in all three database connectors (MySQL, PostgreSQL, MSSQL)…

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [Medium] CVE-2019-25475 – SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that a... https://nvd.nist.gov/vuln/detail/CVE-2019-25475 https://nvd.nist.gov/vuln/detail/CVE-2019-25475 Wed, 11 Mar 2026 19:16:01 +0000 Medium CVE-2019-25475

SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can inject 6000 bytes of data into the User Name and Registration Code field to trigger a denial of service condition.

CVSS: 6.2 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-26116 – Improper neutralization of special elements used in an sql command ('sql injecti... https://nvd.nist.gov/vuln/detail/CVE-2026-26116 https://nvd.nist.gov/vuln/detail/CVE-2026-26116 Tue, 10 Mar 2026 18:18:40 +0000 High CVE-2026-26116

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2026-26115 – Improper validation of specified type of input in SQL Server allows an authorize... https://nvd.nist.gov/vuln/detail/CVE-2026-26115 https://nvd.nist.gov/vuln/detail/CVE-2026-26115 Tue, 10 Mar 2026 18:18:40 +0000 High CVE-2026-26115

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-1287

View on NVD

]]> [High] CVE-2026-21262 – Improper access control in SQL Server allows an authorized attacker to elevate p... https://nvd.nist.gov/vuln/detail/CVE-2026-21262 https://nvd.nist.gov/vuln/detail/CVE-2026-21262 Tue, 10 Mar 2026 18:18:06 +0000 High CVE-2026-21262

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-284

View on NVD

]]> [High] CVE-2025-15560 – An authenticated attacker with minimal permissions can exploit a SQL injection i... https://nvd.nist.gov/vuln/detail/CVE-2025-15560 https://nvd.nist.gov/vuln/detail/CVE-2025-15560 Thu, 19 Feb 2026 11:15:56 +0000 High CVE-2025-15560

An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL queries. If the Firebird backend is used, attackers are able to retrieve all data from the database backend. If the MSSQL backend is used the attacker can execute arbitrary SQL statements on the database backend and gain access to sensitive data.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [Medium] CVE-2025-59095 – The program libraries (DLL) and binaries used by exos 9300 contain multiple hard... https://nvd.nist.gov/vuln/detail/CVE-2025-59095 https://nvd.nist.gov/vuln/detail/CVE-2025-59095 Mon, 26 Jan 2026 10:16:06 +0000 Medium CVE-2025-59095

The program libraries (DLL) and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key (cryptoKey) to transform each character of the input string. However, it's important to note that this implementation does…

CVSS: 6.8 · CWE: CWE-798

View on NVD

]]> [High] CVE-2025-59093 – Exos 9300 instances are using a randomly generated database password to connect ... https://nvd.nist.gov/vuln/detail/CVE-2025-59093 https://nvd.nist.gov/vuln/detail/CVE-2025-59093 Mon, 26 Jan 2026 10:16:06 +0000 High CVE-2025-59093

Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server. The password is derived from static random values, which are concatenated to the hostname and a random string that can be read by every user from the registry. This allows an attacker to derive the database password and get authenticated access to the central exos 9300 database as the u…

CVSS: 8.5 · CWE: CWE-656

View on NVD

]]> [High] CVE-2025-61943 – The vulnerability, if exploited, could allow an authenticated miscreant (Proces... https://nvd.nist.gov/vuln/detail/CVE-2025-61943 https://nvd.nist.gov/vuln/detail/CVE-2025-61943 Fri, 16 Jan 2026 02:16:45 +0000 High CVE-2025-61943

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper with queries in Captive Historian and achieve code execution under SQL Server administrative privileges, potentially resulting in complete compromise of the SQL Server.

CVSS: 8.4 · CWE: CWE-89

View on NVD

]]> [High] CVE-2026-20803 – Missing authentication for critical function in SQL Server allows an authorized ... https://nvd.nist.gov/vuln/detail/CVE-2026-20803 https://nvd.nist.gov/vuln/detail/CVE-2026-20803 Tue, 13 Jan 2026 18:16:06 +0000 High CVE-2026-20803

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 7.2 · CWE: CWE-306

View on NVD

]]> [High] CVE-2025-64298 – NMIS/BioDose V22.02 and previous version installations where the embedded Micros... https://nvd.nist.gov/vuln/detail/CVE-2025-64298 https://nvd.nist.gov/vuln/detail/CVE-2025-64298 Tue, 02 Dec 2025 21:15:52 +0000 High CVE-2025-64298

NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are exposed in the Windows share accessed by clients in networked installs. By default, this directory has insecure directory paths that allow access to the SQL Server database and configuration files, which can contain sensitive data.

CVSS: 8.4 · CWE: CWE-732

View on NVD

]]> [High] CVE-2025-62575 – NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server databas... https://nvd.nist.gov/vuln/detail/CVE-2025-62575 https://nvd.nist.gov/vuln/detail/CVE-2025-62575 Tue, 02 Dec 2025 21:15:52 +0000 High CVE-2025-62575

NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database. The SQL user account 'nmdbuser' and other created accounts by default have the sysadmin role. This can lead to remote code execution through the use of certain built-in stored procedures.

CVSS: 8.3 · CWE: CWE-732

View on NVD

]]> [High] CVE-2025-61940 – NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user accou... https://nvd.nist.gov/vuln/detail/CVE-2025-61940 https://nvd.nist.gov/vuln/detail/CVE-2025-61940 Tue, 02 Dec 2025 21:15:51 +0000 High CVE-2025-61940

NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database. User access in the client application is restricted by a password authentication check in the client software but the underlying database connection always has access. The latest version of NMIS/BioDose introduces an option to use Windows user authentication with the database, which…

CVSS: 8.3 · CWE: CWE-603

View on NVD

]]> [High] CVE-2025-10703 – Improper Control of Generation of Code ('Code Injection') vulnerability in Progr... https://nvd.nist.gov/vuln/detail/CVE-2025-10703 https://nvd.nist.gov/vuln/detail/CVE-2025-10703 Wed, 19 Nov 2025 16:15:46 +0000 High CVE-2025-10703

Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JDBC drivers, DataDirect Hybrid Data Pipeline JDBC driver and the DataDirect OpenAccess JDBC driver l…

CVSS: 8.6 · CWE: CWE-94

View on NVD

]]> [High] CVE-2025-10702 – Improper Control of Generation of Code ('Code Injection') vulnerability in Progr... https://nvd.nist.gov/vuln/detail/CVE-2025-10702 https://nvd.nist.gov/vuln/detail/CVE-2025-10702 Wed, 19 Nov 2025 16:15:46 +0000 High CVE-2025-10702

Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JDBC drivers, DataDirect Hybrid Data Pipeline JDBC driver and the DataDirect OpenAccess JDBC driver…

CVSS: 8.6 · CWE: CWE-94

View on NVD

]]> [High] CVE-2025-59499 – Improper neutralization of special elements used in an sql command ('sql injecti... https://nvd.nist.gov/vuln/detail/CVE-2025-59499 https://nvd.nist.gov/vuln/detail/CVE-2025-59499 Tue, 11 Nov 2025 18:15:35 +0000 High CVE-2025-59499

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [Critical] CVE-2025-10640 – An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer se... https://nvd.nist.gov/vuln/detail/CVE-2025-10640 https://nvd.nist.gov/vuln/detail/CVE-2025-10640 Tue, 21 Oct 2025 12:15:35 +0000 Critical CVE-2025-10640

An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive monitoring data. This includes monitored screenshots and keystrokes of all users. The WorkExaminer Profess…

CVSS: 9.8 · CWE: CWE-602

View on NVD

]]> [High] CVE-2025-11177 – The External Login plugin for WordPress is vulnerable to SQL Injection via the '... https://nvd.nist.gov/vuln/detail/CVE-2025-11177 https://nvd.nist.gov/vuln/detail/CVE-2025-11177 Wed, 15 Oct 2025 09:15:42 +0000 High CVE-2025-11177

The External Login plugin for WordPress is vulnerable to SQL Injection via the 'log' parameter in all versions up to, and including, 1.11.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to…

CVSS: 7.5 · CWE: CWE-89

View on NVD

]]> [High] CVE-2025-59250 – Improper input validation in JDBC Driver for SQL Server allows an unauthorized a... https://nvd.nist.gov/vuln/detail/CVE-2025-59250 https://nvd.nist.gov/vuln/detail/CVE-2025-59250 Tue, 14 Oct 2025 17:16:07 +0000 High CVE-2025-59250

Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.

CVSS: 8.1 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-55227 – Improper neutralization of special elements used in a command ('command injectio... https://nvd.nist.gov/vuln/detail/CVE-2025-55227 https://nvd.nist.gov/vuln/detail/CVE-2025-55227 Tue, 09 Sep 2025 17:16:05 +0000 High CVE-2025-55227

Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-77

View on NVD

]]> [Medium] CVE-2025-47997 – Concurrent execution using shared resource with improper synchronization ('race ... https://nvd.nist.gov/vuln/detail/CVE-2025-47997 https://nvd.nist.gov/vuln/detail/CVE-2025-47997 Tue, 09 Sep 2025 17:15:47 +0000 Medium CVE-2025-47997

Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.

CVSS: 6.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2025-53727 – Improper neutralization of special elements used in an sql command ('sql injecti... https://nvd.nist.gov/vuln/detail/CVE-2025-53727 https://nvd.nist.gov/vuln/detail/CVE-2025-53727 Tue, 12 Aug 2025 18:15:42 +0000 High CVE-2025-53727

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2025-49759 – Improper neutralization of special elements used in an sql command ('sql injecti... https://nvd.nist.gov/vuln/detail/CVE-2025-49759 https://nvd.nist.gov/vuln/detail/CVE-2025-49759 Tue, 12 Aug 2025 18:15:31 +0000 High CVE-2025-49759

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2025-49758 – Improper neutralization of special elements used in an sql command ('sql injecti... https://nvd.nist.gov/vuln/detail/CVE-2025-49758 https://nvd.nist.gov/vuln/detail/CVE-2025-49758 Tue, 12 Aug 2025 18:15:31 +0000 High CVE-2025-49758

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [High] CVE-2025-47954 – Improper neutralization of special elements used in an sql command ('sql injecti... https://nvd.nist.gov/vuln/detail/CVE-2025-47954 https://nvd.nist.gov/vuln/detail/CVE-2025-47954 Tue, 12 Aug 2025 18:15:28 +0000 High CVE-2025-47954

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2025-24999 – Improper access control in SQL Server allows an authorized attacker to elevate p... https://nvd.nist.gov/vuln/detail/CVE-2025-24999 https://nvd.nist.gov/vuln/detail/CVE-2025-24999 Tue, 12 Aug 2025 18:15:27 +0000 High CVE-2025-24999

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-284

View on NVD

]]> [High] CVE-2025-49719 – Improper input validation in SQL Server allows an unauthorized attacker to discl... https://nvd.nist.gov/vuln/detail/CVE-2025-49719 https://nvd.nist.gov/vuln/detail/CVE-2025-49719 Tue, 08 Jul 2025 17:15:59 +0000 High CVE-2025-49719

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-49718 – Use of uninitialized resource in SQL Server allows an unauthorized attacker to d... https://nvd.nist.gov/vuln/detail/CVE-2025-49718 https://nvd.nist.gov/vuln/detail/CVE-2025-49718 Tue, 08 Jul 2025 17:15:59 +0000 High CVE-2025-49718

Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.

CVSS: 7.5 · CWE: CWE-908

View on NVD

]]> [High] CVE-2025-49717 – Heap-based buffer overflow in SQL Server allows an authorized attacker to execut... https://nvd.nist.gov/vuln/detail/CVE-2025-49717 https://nvd.nist.gov/vuln/detail/CVE-2025-49717 Tue, 08 Jul 2025 17:15:59 +0000 High CVE-2025-49717

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS: 8.5 · CWE: CWE-122

View on NVD

]]> [Medium] CVE-2025-43713 – ASNA Assist and ASNA Registrar before 2025-03-31 allow deserialization attacks a... https://nvd.nist.gov/vuln/detail/CVE-2025-43713 https://nvd.nist.gov/vuln/detail/CVE-2025-43713 Thu, 03 Jul 2025 14:15:29 +0000 Medium CVE-2025-43713

ASNA Assist and ASNA Registrar before 2025-03-31 allow deserialization attacks against .NET remoting. These are Windows system services that support license key management and deprecated Windows network authentication. The services are implemented with .NET remoting and can be exploited via well-known deserialization techniques inherent in the technology. Because the services run with SYSTEM-leve…

CVSS: 6.5 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-29803 – Uncontrolled search path element in Visual Studio Tools for Applications and SQL... https://nvd.nist.gov/vuln/detail/CVE-2025-29803 https://nvd.nist.gov/vuln/detail/CVE-2025-29803 Sat, 12 Apr 2025 02:15:20 +0000 High CVE-2025-29803

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.

CVSS: 7.3 · CWE: CWE-427

View on NVD

]]> [Critical] CVE-2025-29980 – A SQL injection issue has been discovered in eTRAKiT.net release 3.2.1.77. Due t... https://nvd.nist.gov/vuln/detail/CVE-2025-29980 https://nvd.nist.gov/vuln/detail/CVE-2025-29980 Thu, 20 Mar 2025 19:15:38 +0000 Critical CVE-2025-29980

A SQL injection issue has been discovered in eTRAKiT.net release 3.2.1.77. Due to improper input validation, a remote unauthenticated attacker can run arbitrary commands as the current MS SQL server account. It is recommended that the CRM feature is turned off while on eTRAKiT.net release 3.2.1.77. eTRAKiT.Net is no longer supported, and users are recommended to migrate to the latest version of C…

CVSS: 9.8 · CWE: CWE-89

View on NVD

]]> [Critical] CVE-2024-52335 – A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_H... https://nvd.nist.gov/vuln/detail/CVE-2024-52335 https://nvd.nist.gov/vuln/detail/CVE-2024-52335 Fri, 06 Dec 2024 14:15:21 +0000 Critical CVE-2024-52335

A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF05). The affected application do not properly sanitize input data before sending it to the SQL server. This could allow an attacker with access to the application could use this vulnerability to execute malicious SQL commands to compromise the whole database.

CVSS: 9.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2024-49021 – Microsoft SQL Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49021 https://nvd.nist.gov/vuln/detail/CVE-2024-49021 Tue, 12 Nov 2024 18:15:42 +0000 High CVE-2024-49021

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2024-49018 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49018 https://nvd.nist.gov/vuln/detail/CVE-2024-49018 Tue, 12 Nov 2024 18:15:41 +0000 High CVE-2024-49018

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-197

View on NVD

]]> [High] CVE-2024-49017 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49017 https://nvd.nist.gov/vuln/detail/CVE-2024-49017 Tue, 12 Nov 2024 18:15:41 +0000 High CVE-2024-49017

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49016 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49016 https://nvd.nist.gov/vuln/detail/CVE-2024-49016 Tue, 12 Nov 2024 18:15:41 +0000 High CVE-2024-49016

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2024-49015 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49015 https://nvd.nist.gov/vuln/detail/CVE-2024-49015 Tue, 12 Nov 2024 18:15:40 +0000 High CVE-2024-49015

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49014 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49014 https://nvd.nist.gov/vuln/detail/CVE-2024-49014 Tue, 12 Nov 2024 18:15:40 +0000 High CVE-2024-49014

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-415

View on NVD

]]> [High] CVE-2024-49013 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49013 https://nvd.nist.gov/vuln/detail/CVE-2024-49013 Tue, 12 Nov 2024 18:15:40 +0000 High CVE-2024-49013

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49012 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49012 https://nvd.nist.gov/vuln/detail/CVE-2024-49012 Tue, 12 Nov 2024 18:15:40 +0000 High CVE-2024-49012

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49011 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49011 https://nvd.nist.gov/vuln/detail/CVE-2024-49011 Tue, 12 Nov 2024 18:15:40 +0000 High CVE-2024-49011

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49010 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49010 https://nvd.nist.gov/vuln/detail/CVE-2024-49010 Tue, 12 Nov 2024 18:15:39 +0000 High CVE-2024-49010

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49009 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49009 https://nvd.nist.gov/vuln/detail/CVE-2024-49009 Tue, 12 Nov 2024 18:15:39 +0000 High CVE-2024-49009

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49008 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49008 https://nvd.nist.gov/vuln/detail/CVE-2024-49008 Tue, 12 Nov 2024 18:15:39 +0000 High CVE-2024-49008

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49007 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49007 https://nvd.nist.gov/vuln/detail/CVE-2024-49007 Tue, 12 Nov 2024 18:15:39 +0000 High CVE-2024-49007

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49006 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49006 https://nvd.nist.gov/vuln/detail/CVE-2024-49006 Tue, 12 Nov 2024 18:15:38 +0000 High CVE-2024-49006

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49005 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49005 https://nvd.nist.gov/vuln/detail/CVE-2024-49005 Tue, 12 Nov 2024 18:15:38 +0000 High CVE-2024-49005

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49004 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49004 https://nvd.nist.gov/vuln/detail/CVE-2024-49004 Tue, 12 Nov 2024 18:15:38 +0000 High CVE-2024-49004

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49003 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49003 https://nvd.nist.gov/vuln/detail/CVE-2024-49003 Tue, 12 Nov 2024 18:15:38 +0000 High CVE-2024-49003

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2024-49002 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49002 https://nvd.nist.gov/vuln/detail/CVE-2024-49002 Tue, 12 Nov 2024 18:15:38 +0000 High CVE-2024-49002

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49001 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49001 https://nvd.nist.gov/vuln/detail/CVE-2024-49001 Tue, 12 Nov 2024 18:15:37 +0000 High CVE-2024-49001

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-49000 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49000 https://nvd.nist.gov/vuln/detail/CVE-2024-49000 Tue, 12 Nov 2024 18:15:37 +0000 High CVE-2024-49000

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-48999 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-48999 https://nvd.nist.gov/vuln/detail/CVE-2024-48999 Tue, 12 Nov 2024 18:15:37 +0000 High CVE-2024-48999

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-48998 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-48998 https://nvd.nist.gov/vuln/detail/CVE-2024-48998 Tue, 12 Nov 2024 18:15:37 +0000 High CVE-2024-48998

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-48997 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-48997 https://nvd.nist.gov/vuln/detail/CVE-2024-48997 Tue, 12 Nov 2024 18:15:36 +0000 High CVE-2024-48997

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-48996 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-48996 https://nvd.nist.gov/vuln/detail/CVE-2024-48996 Tue, 12 Nov 2024 18:15:36 +0000 High CVE-2024-48996

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-48995 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-48995 https://nvd.nist.gov/vuln/detail/CVE-2024-48995 Tue, 12 Nov 2024 18:15:36 +0000 High CVE-2024-48995

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-48994 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-48994 https://nvd.nist.gov/vuln/detail/CVE-2024-48994 Tue, 12 Nov 2024 18:15:36 +0000 High CVE-2024-48994

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-48993 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-48993 https://nvd.nist.gov/vuln/detail/CVE-2024-48993 Tue, 12 Nov 2024 18:15:35 +0000 High CVE-2024-48993

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-43462 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-43462 https://nvd.nist.gov/vuln/detail/CVE-2024-43462 Tue, 12 Nov 2024 18:15:23 +0000 High CVE-2024-43462

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-43459 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-43459 https://nvd.nist.gov/vuln/detail/CVE-2024-43459 Tue, 12 Nov 2024 18:15:23 +0000 High CVE-2024-43459

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2024-38255 – SQL Server Native Client Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-38255 https://nvd.nist.gov/vuln/detail/CVE-2024-38255 Tue, 12 Nov 2024 18:15:21 +0000 High CVE-2024-38255

SQL Server Native Client Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-43519 – Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit... https://nvd.nist.gov/vuln/detail/CVE-2024-43519 https://nvd.nist.gov/vuln/detail/CVE-2024-43519 Tue, 08 Oct 2024 18:15:14 +0000 High CVE-2024-43519

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-197

View on NVD

]]> [High] CVE-2024-43474 – Microsoft SQL Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-43474 https://nvd.nist.gov/vuln/detail/CVE-2024-43474 Tue, 10 Sep 2024 17:15:35 +0000 High CVE-2024-43474

Microsoft SQL Server Information Disclosure Vulnerability

CVSS: 7.6 · CWE: CWE-170

View on NVD

]]> [High] CVE-2024-37980 – Microsoft SQL Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37980 https://nvd.nist.gov/vuln/detail/CVE-2024-37980 Tue, 10 Sep 2024 17:15:19 +0000 High CVE-2024-37980

Microsoft SQL Server Elevation of Privilege Vulnerability

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [High] CVE-2024-37966 – Microsoft SQL Server Native Scoring Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37966 https://nvd.nist.gov/vuln/detail/CVE-2024-37966 Tue, 10 Sep 2024 17:15:19 +0000 High CVE-2024-37966

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVSS: 7.1 · CWE: CWE-125

View on NVD

]]> [High] CVE-2024-37965 – Microsoft SQL Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37965 https://nvd.nist.gov/vuln/detail/CVE-2024-37965 Tue, 10 Sep 2024 17:15:19 +0000 High CVE-2024-37965

Microsoft SQL Server Elevation of Privilege Vulnerability

CVSS: 8.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2024-37342 – Microsoft SQL Server Native Scoring Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37342 https://nvd.nist.gov/vuln/detail/CVE-2024-37342 Tue, 10 Sep 2024 17:15:18 +0000 High CVE-2024-37342

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVSS: 7.1 · CWE: CWE-125

View on NVD

]]> [High] CVE-2024-37341 – Microsoft SQL Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37341 https://nvd.nist.gov/vuln/detail/CVE-2024-37341 Tue, 10 Sep 2024 17:15:18 +0000 High CVE-2024-37341

Microsoft SQL Server Elevation of Privilege Vulnerability

CVSS: 8.8 · CWE: CWE-284

View on NVD

]]> [High] CVE-2024-37340 – Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37340 https://nvd.nist.gov/vuln/detail/CVE-2024-37340 Tue, 10 Sep 2024 17:15:18 +0000 High CVE-2024-37340

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-822

View on NVD

]]> [High] CVE-2024-37339 – Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37339 https://nvd.nist.gov/vuln/detail/CVE-2024-37339 Tue, 10 Sep 2024 17:15:18 +0000 High CVE-2024-37339

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-822

View on NVD

]]> [High] CVE-2024-37338 – Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37338 https://nvd.nist.gov/vuln/detail/CVE-2024-37338 Tue, 10 Sep 2024 17:15:18 +0000 High CVE-2024-37338

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-125

View on NVD

]]> [High] CVE-2024-37337 – Microsoft SQL Server Native Scoring Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37337 https://nvd.nist.gov/vuln/detail/CVE-2024-37337 Tue, 10 Sep 2024 17:15:17 +0000 High CVE-2024-37337

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVSS: 7.1 · CWE: CWE-197

View on NVD

]]> [High] CVE-2024-37335 – Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37335 https://nvd.nist.gov/vuln/detail/CVE-2024-37335 Tue, 10 Sep 2024 17:15:17 +0000 High CVE-2024-37335

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-26191 – Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-26191 https://nvd.nist.gov/vuln/detail/CVE-2024-26191 Tue, 10 Sep 2024 17:15:16 +0000 High CVE-2024-26191

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-26186 – Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-26186 https://nvd.nist.gov/vuln/detail/CVE-2024-26186 Tue, 10 Sep 2024 17:15:16 +0000 High CVE-2024-26186

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [Critical] CVE-2024-6912 – Use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows allows... https://nvd.nist.gov/vuln/detail/CVE-2024-6912 https://nvd.nist.gov/vuln/detail/CVE-2024-6912 Mon, 22 Jul 2024 21:15:05 +0000 Critical CVE-2024-6912

Use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows allows an attacker to login remove on all prone installations.This issue affects ProcessPlus: through 1.11.6507.0.

CVSS: 9.8 · CWE: CWE-798

View on NVD

]]> [High] CVE-2024-38088 – SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-38088 https://nvd.nist.gov/vuln/detail/CVE-2024-38088 Tue, 09 Jul 2024 17:15:44 +0000 High CVE-2024-38088

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-38087 – SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-38087 https://nvd.nist.gov/vuln/detail/CVE-2024-38087 Tue, 09 Jul 2024 17:15:44 +0000 High CVE-2024-38087

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-415

View on NVD

]]> [High] CVE-2024-37336 – SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37336 https://nvd.nist.gov/vuln/detail/CVE-2024-37336 Tue, 09 Jul 2024 17:15:22 +0000 High CVE-2024-37336

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-190

View on NVD

]]> [High] CVE-2024-37334 – Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37334 https://nvd.nist.gov/vuln/detail/CVE-2024-37334 Tue, 09 Jul 2024 17:15:22 +0000 High CVE-2024-37334

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-37333 – SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37333 https://nvd.nist.gov/vuln/detail/CVE-2024-37333 Tue, 09 Jul 2024 17:15:22 +0000 High CVE-2024-37333

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-37332 – SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37332 https://nvd.nist.gov/vuln/detail/CVE-2024-37332 Tue, 09 Jul 2024 17:15:22 +0000 High CVE-2024-37332

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-37331 – SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37331 https://nvd.nist.gov/vuln/detail/CVE-2024-37331 Tue, 09 Jul 2024 17:15:22 +0000 High CVE-2024-37331

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-37330 – SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37330 https://nvd.nist.gov/vuln/detail/CVE-2024-37330 Tue, 09 Jul 2024 17:15:21 +0000 High CVE-2024-37330

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2024-37329 – SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-37329 https://nvd.nist.gov/vuln/detail/CVE-2024-37329 Tue, 09 Jul 2024 17:15:21 +0000 High CVE-2024-37329

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]>