Skip to contentMicrosoft Sql Server vulnerabilities
- microsoft sql server, data engine +1 moreMicrosoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named...CVE-2003-02307.2 High
- microsoft sql serverMicrosoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1)...CVE-2002-19815.0 Medium
- microsoft sql serverMicrosoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password...CVE-2002-18727.5 High
- microsoft data engine, sql server +1 moreThe xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and...CVE-2002-114510.0 High
- microsoft data engine, sql server +1 moreMicrosoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft...CVE-2002-11387.5 High
- microsoft data engine, sql server +1 moreBuffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL...CVE-2002-11377.5 High
- microsoft sql server, data engine +1 moreBuffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft...CVE-2002-1123Public exploitEPSS 77.7%7.5 High
- microsoft jet, sql server +1 moreBuffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000...CVE-2002-0859Public exploitEPSS 26.2%7.5 High
- microsoft sql serverMicrosoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute...CVE-2002-0982Public exploit7.5 High
- microsoft sql server, data engine +1 moreMicrosoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures...CVE-2002-0721Public exploitEPSS 46.3%10.0 High
- microsoft sql serverMicrosoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed...CVE-2002-0729EPSS 10.7%5.0 Medium
- microsoft sql serverThe keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial...CVE-2002-0650EPSS 18.3%5.0 Medium
- microsoft sql server, data engine +1 moreMultiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft...CVE-2002-0649Public exploitEPSS 84.8%7.5 High
- microsoft sql server, data engine +1 moreSQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft...CVE-2002-06457.5 High
- microsoft sql server, data engine +1 moreBuffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000...CVE-2002-0644Public exploitEPSS 11.4%7.5 High
- microsoft msde, sql server +1 moreThe registry key containing the SQL Server service account information in Microsoft SQL Server...CVE-2002-0642EPSS 48.1%7.2 High
- microsoft data engine, sql server +1 moreThe installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates...CVE-2002-06434.6 Medium
- microsoft msde, sql server +1 moreBuffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL...CVE-2002-0641EPSS 11.2%7.5 High
- microsoft msde, sql server +1 moreBuffer overflow in the password encryption function of Microsoft SQL Server 2000, including...CVE-2002-0624Public exploitEPSS 22.8%7.5 High
- microsoft sql serverCross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an...CVE-2002-0187Public exploitEPSS 13.9%7.5 High
- microsoft sql serverBuffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote...CVE-2002-0186Public exploitEPSS 55.5%7.5 High
- microsoft sql server, windows 2000, internet information services +2 moreThe MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000,...CVE-2002-0224EPSS 29.3%5.0 Medium
- microsoft sql serverBuffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote...CVE-2002-0154EPSS 24.9%7.5 High
- microsoft xml core services, internet explorer, sql server +1 more +3 moreXMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security...CVE-2002-0057EPSS 23.2%5.0 Medium
- microsoft sql serverBuffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via...CVE-2002-0056EPSS 24.9%7.5 High
- microsoft sql server, windows 2000, windows nt +1 more +3 moreFormat string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows...CVE-2001-08795.0 Medium
- microsoft sql serverBuffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server...CVE-2001-0542EPSS 13.6%7.5 High
- microsoft exchange server, sql server, windows 2000 +1 more +3 moreVulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft...CVE-2001-0509EPSS 17.0%5.0 Medium
- microsoft sql serverAn SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local...CVE-2001-03447.2 High
- microsoft sql server, data engine +1 moreThe xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE)...CVE-2000-10884.6 Medium
- microsoft sql server, data engine +1 moreThe xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE)...CVE-2000-10874.6 Medium
- microsoft sql server, data engine +1 moreThe xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE)...CVE-2000-10864.6 Medium
- microsoft sql server, data engine +1 moreThe xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does...CVE-2000-1085Public exploit4.6 Medium
- microsoft sql server, data engine +1 moreThe xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does...CVE-2000-10844.6 Medium
- microsoft sql server, data engine +1 moreThe xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not...CVE-2000-1083Public exploit2.1 Low
- microsoft sql server, data engine +1 moreThe xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does...CVE-2000-10824.6 Medium
- microsoft sql server, data engine +1 moreThe xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE)...CVE-2000-1081Public exploit4.6 Medium
- microsoft sql serverMicrosoft Enterprise Manager allows local users to obtain database passwords via the Data...CVE-2000-06544.6 Medium
- microsoft sql serverMicrosoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by...CVE-2000-06034.6 Medium
- microsoft sql serverMicrosoft SQL Server allows local users to obtain database passwords via the Data Transformation...CVE-2000-04852.1 Low
- microsoft sql serverThe Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System...CVE-2000-0402Public exploitEPSS 90.6%2.1 Low
- microsoft sql serverWhen a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the ...CVE-2000-01997.2 High
- microsoft data engine, sql server +1 moreMicrosoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain...CVE-2000-02027.5 High
- microsoft sql serverMicrosoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed...CVE-1999-0999Public exploitEPSS 21.7%4.3 Medium
- microsoft sql serverMicrosoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec...CVE-1999-15567.2 High