Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 236

CVE-2025-47997

Microsoft SQL Server Information Disclosure Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Sql Server 2016 Sql Server 2017 Sql Server 2019 and 1 more
CVE-2025-49759

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Server Sql Server Sql Server 2016 and 3 more