CVE Database and Vulnerability Search
Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-29143HIGH | Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server Remote Code Execution Vulnerability. Jun 15, 2022 | CVSS7.5v3.1 | EPSS1.88% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-1636HIGH | Microsoft SQL Elevation of Privilege VulnerabilityMicrosoft SQL Elevation of Privilege Vulnerability CWE-89Jan 12, 2021 | CVSS8.8v3.1 | EPSS6.15% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2020-0618CRITICAL | Microsoft SQL Server Reporting Services Remote Code Execution VulnerabilityA remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'. | CVSS9.8v3.1 | EPSS99% | PoCs6 | SignalsListed in CISA KEVKnown ransomware use1 Nuclei template | STIX |
CVE-2019-1068HIGH | Microsoft SQL Server Remote Code Execution VulnerabilityA remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'. Jul 15, 2019 | CVSS8.8v3.0 | EPSS33% | PoCs1 | SignalsNot listed in CISA KEVKnown ransomware useNo Nuclei templates | STIX |