Skip to contentMicrosoft Sql Server vulnerabilities
- microsoft sql server reporting services, sql server 2017 reporting services, sql server 2019 reporting services +2 moreSQL Server Reporting Services Security Feature Bypass VulnerabilityCVE-2020-10444.3 Medium
- microsoft sql server management studio, sql server management studio 18.6 +1 moreMicrosoft SQL Server Management Studio Denial of Service VulnerabilityCVE-2020-14555.3 Medium
- microsoft sql server, sql server 2014 service pack 3 for 32-bit systems (cu), sql server 2014 service pack 3 for 32-bit systems (gdr) +3 more +5 moreA remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it...CVE-2020-0618In KEVPublic exploitEPSS 99.0%8.8 High
- microsoft power bi report server, sql server 2017 reporting services, sql server 2019 reporting services +2 moreA cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services ...CVE-2019-1332Public exploitEPSS 10.9%6.1 Medium
- microsoft sql server management studioAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...CVE-2019-13766.5 Medium
- microsoft sql server management studioAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...CVE-2019-13136.5 Medium
- microsoft sql server, sql server 2014 service pack 2 for 32-bit systems (gdr), sql server 2014 service pack 2 for x64-based systems (gdr) +9 more +11 moreA remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles...CVE-2019-1068In KEVPublic exploitEPSS 57.3%8.8 High
- microsoft sql server, sql server 2017 for x64-based systems (cu+gdr), sql server 2017 for x64-based systems (gdr) +2 moreAn information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it...CVE-2019-08196.5 Medium
- microsoft sql server management studio 17.9, sql server management studio 18.0, sql server management studio +2 moreAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...CVE-2018-8533Public exploitEPSS 23.4%5.5 Medium
- microsoft sql server management studio 17.9, sql server management studio 18.0, sql server management studio +2 moreAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...CVE-2018-8532Public exploitEPSS 23.4%5.5 Medium
- microsoft sql server management studio 17.9, sql server management studio 18.0, sql server management studio +2 moreAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...CVE-2018-8527Public exploitEPSS 23.4%5.5 Medium
- microsoft sql serverA buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code...CVE-2018-8273EPSS 31.2%9.8 Critical
- microsoft sql serverMicrosoft SQL Server Analysis Services in Microsoft SQL Server 2012, Microsoft SQL Server 2014,...CVE-2017-85167.5 High
- microsoft sql serverMicrosoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified...CVE-2016-7254EPSS 11.9%8.8 High
- microsoft sql serverThe agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not...CVE-2016-7253EPSS 11.9%8.8 High
- microsoft sql serverMicrosoft SQL Server 2016 mishandles the FILESTREAM path, which allows remote authenticated users...CVE-2016-7252EPSS 17.6%6.5 Medium
- microsoft sql serverCross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows...CVE-2016-72516.1 Medium
- microsoft sql serverMicrosoft SQL Server 2014 SP1, 2014 SP2, and 2016 does not properly perform a cast of an...CVE-2016-7250EPSS 12.0%8.8 High
- microsoft sql serverMicrosoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, which...CVE-2016-7249EPSS 11.9%8.8 High
- microsoft sql serverMicrosoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 does not...CVE-2015-1763EPSS 11.8%8.5 High
- microsoft sql serverMicrosoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when...CVE-2015-1762EPSS 10.3%7.1 High
- microsoft sql serverMicrosoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an...CVE-2015-1761EPSS 18.9%6.5 Medium
- microsoft sql serverMicrosoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack...CVE-2014-4061EPSS 26.5%6.8 Medium
- microsoft sql serverCross-site scripting (XSS) vulnerability in Master Data Services (MDS) in Microsoft SQL Server...CVE-2014-1820EPSS 14.7%4.3 Medium
- microsoft sql server, sql server reporting services +1 moreCross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server...CVE-2012-2552EPSS 16.3%4.3 Medium
- microsoft commerce server, host integration server, office +4 more +6 moreThe TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3,...CVE-2012-1856In KEVEPSS 72.0%8.8 High
- microsoft biztalk server, commerce server, mscomctl.ocx +8 more +10 moreThe (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX...CVE-2012-0158In KEVPublic exploitEPSS 100.0%8.8 High
- microsoft sql server, sql server management studio express, visual studio +1 more +3 moreThe XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1,...CVE-2011-1280EPSS 15.3%4.3 Medium
- microsoft excel viewer, expression web, forefront client security +23 more +25 moreInteger overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP...CVE-2009-3126EPSS 23.5%9.3 High
- microsoft office, .net framework, excel viewer +23 more +25 moreGDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property...CVE-2009-2528EPSS 20.5%9.3 High
- microsoft .net framework, excel viewer, expression web +23 more +25 moreMultiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET...CVE-2009-2504EPSS 21.0%9.3 High
- microsoft excel viewer, expression web, forefront client security +23 more +25 moreGDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2,...CVE-2009-2503EPSS 22.2%9.3 High
- microsoft excel viewer, expression web, forefront client security +23 more +25 moreBuffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP...CVE-2009-2502EPSS 22.0%9.3 High
- microsoft excel viewer, expression web, forefront client security +23 more +25 moreHeap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3,...CVE-2009-2501EPSS 26.7%9.3 High
- microsoft excel viewer, expression web, forefront client security +23 more +25 moreInteger overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP...CVE-2009-2500EPSS 23.6%9.3 High
- microsoft sql serverHeap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier;...CVE-2008-5416Public exploitEPSS 87.0%9.0 High
- microsoft sql serverBuffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in...CVE-2008-4110EPSS 18.4%7.6 High
- microsoft digital image suite, forefront client security, office +6 more +8 moreInteger overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007...CVE-2008-3015EPSS 39.3%9.3 High
- microsoft digital image suite, forefront client security, internet explorer +11 more +13 moreBuffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and...CVE-2008-3014EPSS 36.7%9.3 High
- microsoft digital image suite, forefront client security, internet explorer +10 more +12 moregdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1...CVE-2008-3013Public exploitEPSS 52.1%9.3 High
- microsoft digital image suite, forefront client security, internet explorer +13 more +15 moregdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1...CVE-2008-3012EPSS 31.0%9.3 High
- microsoft digital image suite, forefront client security, internet explorer +13 more +15 moreInteger overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server...CVE-2007-5348Public exploitEPSS 52.9%9.3 High
- microsoft data engine, sql server, wmsde +3 more +5 moreInteger underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE...CVE-2008-0107EPSS 34.5%9.0 High
- microsoft sql server, data engine, sql server desktop engine +1 more +3 moreBuffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2,...CVE-2008-0106EPSS 35.3%9.0 High
- microsoft sql server, data engine, sql server desktop engine +1 more +3 moreBuffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine ...CVE-2008-0086EPSS 61.9%9.0 High
- microsoft data engine, sql server, wmsde +2 more +4 moreSQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express...CVE-2008-0085EPSS 10.7%5.0 Medium
- microsoft sql serverBuffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL ...CVE-2007-4814Public exploitEPSS 45.7%7.5 High
- microsoft sql serverMicrosoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver...CVE-2004-1560Public exploitEPSS 25.6%5.0 Medium
- microsoft sql server, data engine +1 moreMicrosoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain...CVE-2003-0232Public exploit7.2 High
- microsoft sql server, data engine +1 moreMicrosoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a...CVE-2003-0231Public exploitEPSS 36.2%5.0 Medium
- Show moreLoading…