SQL Server vulnerabilities

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL injection vulnerability in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL injection vulnerability in SQL Server allows an authorized attacker to elevate privileges over a network.

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

Access of resource using incompatible type ('type confusion') in SQL Server allows an authenticated attacker to disclose information over a network.

A buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

An SQL injection vulnerability in SQL Server. Improper neutralization of special elements used in an SQL command allows an authorized attacker to elevate privileges over a network.

A vulnerability in SQL Server allows an authorized attacker to elevate privileges over a network via external control of file name or path.

A vulnerability in SQL Server due to improper neutralization of special elements in SQL commands (SQL injection) allows an authorized attacker to elevate privileges over a network.

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

An untrusted pointer dereference vulnerability in SQL Server allows an authorized attacker to execute code over a network.

A vulnerability in SQL Server allows an authorized attacker to elevate privileges over a network due to improper access control.

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network.