Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.Apr 14, 2026
- High7.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- High7.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.Apr 14, 2026
- Medium6.9SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload.EPSS 0.1%Mar 11, 2026
- High8.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.Mar 10, 2026
- High8.8Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.Mar 10, 2026
- High8.8Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.EPSS 2.1%Mar 10, 2026
- High8.8Microsoft SQL Server Reporting Services Remote Code Execution VulnerabilityKEVEPSS 99.0%Feb 11, 2020
- High8.8Microsoft SQL Server Remote Code Execution VulnerabilityKEVEPSS 57.3%Jul 15, 2019
34 records · page 2 of 2
PreviousNext