dbcve.org
Vulnerability index

Browse CVEs

21 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness SQL InjectionCWE-89 × clear
Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Entra Connect HIGH 7.8
CVE-2026-65673

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to…

No fix yet
Fix from $4,900 2026-08-11
Sql Server 2016 HIGH 8.8
CVE-2026-47295

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege…

Fix: 13.0.6500.1 / 13.0.7095.1+
Fix from $1,950 2026-07-14
Sql Server 2016 HIGH 7.5
CVE-2026-47296

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege…

Fix: 13.0.6500.1 / 13.0.7095.1+
Fix from $1,950 2026-07-14
Sql Server 2016 HIGH 7.8
CVE-2026-32176

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege…

Fix: 13.0.6485.1 / 13.0.7080.1+
Fix from $1,950 2026-04-14
Sql Server 2016 HIGH 7.8
CVE-2026-32167

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege…

Fix: 13.0.6485.1 / 13.0.7080.1+
Fix from $1,950 2026-04-14
Sql Server 2016 HIGH 8.8
CVE-2026-26116

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege…

Fix: 13.0.6480.4 / 13.0.7075.5+
Fix from $1,950 2026-03-10
Sharepoint Server HIGH 8.8
CVE-2026-20947EPSS 19%

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19127.20442+
Fix from $1,950 2026-01-13
Sql Server 2016 HIGH 8.8
CVE-2025-59499

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege…

Fix: 13.0.6475.1 / 13.0.7070.1+
Fix from $1,950 2025-11-11
Configuration Manager 2403 HIGH 8.8
CVE-2025-59213

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attack…

Fix: 5.00.9128.1035 / 5.00.9132.1029+
Fix from $1,950 2025-10-14
Configuration Manager 2403 MEDIUM 6.8
CVE-2025-55320

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker…

Fix: 5.00.9128.1035 / 5.00.9132.1029+
Fix from $1,600 2025-10-14
Sql Server 2016 HIGH 8.8
CVE-2025-53727

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege…

Fix: 13.0.6465.1 / 13.0.7060.1+
Fix from $1,950 2025-08-12
Sql Server 2016 HIGH 8.8
CVE-2025-49759

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege…

Fix: 13.0.6465.1 / 13.0.7060.1+
Fix from $1,950 2025-08-12
Sql Server 2022 HIGH 8.8
CVE-2025-47954

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege…

Fix: 16.0.1145.1 / 16.0.4210.1+
Fix from $1,950 2025-08-12
Configuration Manager 2503 HIGH 8.0
CVE-2025-47178

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker…

Fix: 5.00.9135.1003+
Fix from $1,950 2025-07-08
Sharepoint Enterprise Server HIGH 8.8
CVE-2025-47172

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: after 16.0.18526.20396
Fix from $1,950 2025-06-10
Configuration Manager 2403 CRITICAL 9.8
CVE-2024-43468 KEVEPSS 61%

Microsoft Configuration Manager Remote Code Execution Vulnerability

No fix yet
Fix from $2,300 2024-10-08
Dynamics 365 HIGH 8.8
CVE-2022-34700

Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

No fix yet
Fix from $1,950 2022-09-13
Defender For Iot CRITICAL 10.0
CVE-2021-42311

Microsoft Defender for IoT Remote Code Execution Vulnerability

Fix: 10.5.2+
Fix from $2,300 2021-12-15
Defender For Iot CRITICAL 10.0
CVE-2021-42313

Microsoft Defender for IoT Remote Code Execution Vulnerability

Fix: 10.5.2+
Fix from $2,300 2021-12-15
Defender For Iot HIGH 8.8
CVE-2021-41365

Microsoft Defender for IoT Remote Code Execution Vulnerability

Fix: 10.5.2+
Fix from $1,950 2021-12-15
Sql Server HIGH 8.8
CVE-2021-1636EPSS 6%

Microsoft SQL Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2021-01-12