Export limit exceeded: 11550 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 404

Export CSV
CVE-2025-55227

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Microsoft
Products
Sql Server Sql Server 2016 Sql Server 2017 and 2 more
CVE-2025-47997

Microsoft SQL Server Information Disclosure Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Sql Server 2016 Sql Server 2017 Sql Server 2019 and 1 more
CVE-2025-49759

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Server Sql Server Sql Server 2016 and 3 more
CVE-2020-0618

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

CVSS 3.1 · 9.8 Critical EPSS 99.0% KEV · Listed
Vendors
Microsoft
Products
Sql Server