Skip to content
Fencer Intel

All · Microsoft SQL Server

Newest first, late arrivals on top. Also a feed.

  1. 4.3
    CVE-2012-2552 Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Serve…
    Microsoft SQL Server
    EPSS 16.3% chance of exploitation in 30 days, percentile 97%
  2. 8.8
    CVE-2012-1856 The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 20…
    Microsoft SQL Server
    kev EPSS 72.0% chance of exploitation in 30 days, percentile 99.4%
  3. 4.3
    CVE-2011-1280 The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio…
    Microsoft SQL Server
    EPSS 15.3% chance of exploitation in 30 days, percentile 96%
  4. 9.3
    CVE-2009-3126 Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Offic…
    Microsoft SQL Server
    EPSS 23.5% chance of exploitation in 30 days, percentile 97%
  5. 9.3
    CVE-2009-2528 GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to…
    Microsoft SQL Server
    EPSS 20.5% chance of exploitation in 30 days, percentile 97%
  6. 9.3
    CVE-2009-2504 Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2…
    Microsoft SQL Server
    EPSS 21.0% chance of exploitation in 30 days, percentile 97%
  7. 9.3
    CVE-2009-2503 GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft…
    Microsoft SQL Server
    EPSS 22.2% chance of exploitation in 30 days, percentile 97%
  8. 8.1
    CVE-2009-2502 Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office…
    Microsoft SQL Server
    EPSS 22.0% chance of exploitation in 30 days, percentile 97%
  9. 9.3
    CVE-2009-2501 Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Micro…
    Microsoft SQL Server
    EPSS 26.7% chance of exploitation in 30 days, percentile 98%
  10. 9.3
    CVE-2009-2500 Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Offic…
    Microsoft SQL Server
    EPSS 23.6% chance of exploitation in 30 days, percentile 97%
  11. 9.0
    CVE-2008-5416 Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000)…
    Microsoft SQL Server
    5 public exploits EPSS 87.0% chance of exploitation in 30 days, percentile 99.7%
  12. 7.6
    CVE-2008-4110 Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0…
    Microsoft SQL Server
    EPSS 18.4% chance of exploitation in 30 days, percentile 97%
  13. 9.3
    CVE-2008-3015 Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Vis…
    Microsoft SQL Server
    EPSS 39.3% chance of exploitation in 30 days, percentile 98%
  14. 9.3
    CVE-2008-3014 Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold an…
    Microsoft SQL Server
    EPSS 36.7% chance of exploitation in 30 days, percentile 98%
  15. 9.3
    CVE-2008-3013 gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008,…
    Microsoft SQL Server
    1 public exploit EPSS 52.1% chance of exploitation in 30 days, percentile 98%
  16. 9.3
    CVE-2008-3012 gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008,…
    Microsoft SQL Server
    EPSS 31.0% chance of exploitation in 30 days, percentile 98%
  17. 9.3
    CVE-2007-5348 Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server…
    Microsoft SQL Server
    1 public exploit EPSS 52.9% chance of exploitation in 30 days, percentile 98%
  18. 9.0
    CVE-2008-0107 Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2,…
    Microsoft SQL Server
    EPSS 34.5% chance of exploitation in 30 days, percentile 98%
  19. 9.0
    CVE-2008-0106 Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execut…
    Microsoft SQL Server
    EPSS 35.3% chance of exploitation in 30 days, percentile 98%
  20. 9.0
    CVE-2008-0086 Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMS…
    Microsoft SQL Server
    EPSS 61.9% chance of exploitation in 30 days, percentile 99.1%
  21. 5.0
    CVE-2008-0085 SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Eng…
    Microsoft SQL Server
    EPSS 10.7% chance of exploitation in 30 days, percentile 95%
  22. 7.5
    CVE-2007-4814 Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft S…
    Microsoft SQL Server
    2 public exploits EPSS 45.7% chance of exploitation in 30 days, percentile 98%
  23. 5.0
    CVE-2004-1560 Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 143…
    Microsoft SQL Server
    1 public exploit EPSS 25.6% chance of exploitation in 30 days, percentile 97%
  24. 7.2
    CVE-2003-0232 Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC…
    Microsoft SQL Server
    1 public exploit EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  25. 5.0
    CVE-2003-0231 Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long r…
    Microsoft SQL Server
    1 public exploit EPSS 36.2% chance of exploitation in 30 days, percentile 98%
  26. 7.2
    CVE-2003-0230 Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another…
    Microsoft SQL Server
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  27. 5.0
    CVE-2002-1981 Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSseta…
    Microsoft SQL Server
    EPSS 4.6% chance of exploitation in 30 days, percentile 91%
  28. 7.5
    CVE-2002-1872 Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers…
    Microsoft SQL Server
    EPSS 7.0% chance of exploitation in 30 days, percentile 94%
  29. 10.0
    CVE-2002-1145 The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and M…
    Microsoft SQL Server
    EPSS 8.3% chance of exploitation in 30 days, percentile 95%
  30. 7.5
    CVE-2002-1138 Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files…
    Microsoft SQL Server
    EPSS 4.7% chance of exploitation in 30 days, percentile 91%