Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 261

Export CSV
CVE-2026-47295

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Microsoft Sql Server 2016 Service Pack 3 (gdr) Microsoft Sql Server 2016 Service Pack 3 Azure Connect Feature Pack Microsoft Sql Server 2017 (cu 31) and 12 more
CVE-2026-26116

SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Microsoft
Products
Sql Server 2016 Sql Server 2017 Sql Server 2019 and 2 more
CVE-2025-59499

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Microsoft
Products
Sql Server Sql Server 2016 Sql Server 2017 and 2 more
CVE-2020-1044

SQL Server Reporting Services Security Feature Bypass Vulnerability

<p>A security feature bypass vulnerability exists in SQL Server Reporting Services (SSRS) when the server improperly validates attachments uploaded to reports. An attacker who successfully exploited this vulnerability could upload file types that were disallowed by an administrator.</p> <p>To exploit the vulnerability, an authenticated attacker would need to send a specially crafted request to an affected SSRS server.</p> <p>The update addresses the vulnerability by modifying how SSRS validates attachment uploads.</p>

CVSS 3.1 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Microsoft
Products
Sql Server 2017 Reporting Services Sql Server 2019 Reporting Services Sql Server Reporting Services
CVE-2025-55227

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Microsoft
Products
Sql Server Sql Server 2016 Sql Server 2017 and 2 more
CVE-2025-47997

Microsoft SQL Server Information Disclosure Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Sql Server 2016 Sql Server 2017 Sql Server 2019 and 1 more
CVE-2025-49759

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Server Sql Server Sql Server 2016 and 3 more