Microsoft SQL Server CVEs

Three-year CVE watchlist for Microsoft SQL Server and its database services used in business infrastructure.

Dedicated CVE watchlist

Microsoft SQL Server CVEs

Three-year CVE watchlist for Microsoft SQL Server and its database services used in business infrastructure.

Server administration
CategorySwitch between product-focused CVE watchlists.
Showsorted by operational relevance for DataHouse infrastructure
CVE-2024-58385CVSS 9.3Windows

CVE-2024-58385

Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authentication and the id parameter is incorporated into SQL queries without sanitizati...

Updated: 2026-09-28
CVE-2023-54400CVSS 9.3Windows

CVE-2023-54400

Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getEmpByname action without any authentication. Attackers can...

Updated: 2026-09-30

Security newsletter

Get new CVE alerts before they become an incident

We send selected infrastructure threats in English, with practical notes for DataHouse environments.

  • DataHouse: server administration and secure cloud
  • Hostilla.pl: hosting and mail services
  • SecDNS.pl: free DNS security layer