Lucene search
+L

3162 matches found

OSV
OSV
•added 2020/02/11 12:00 a.m.•15 views

UBUNTU-CVE-2020-6798

If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be...

6.1CVSS6.9AI score0.0213EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2020/02/04 12:00 a.m.•5 views

PT-2020-19432

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the template select functionality. This allows for potential...

10CVSS0.06895EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/02/04 12:00 a.m.•7 views

PT-2020-19430

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A select expression language injection remote code execution issue was discovered. This allows for remote code execution. Recommendations For versions prior to 7.3...

10CVSS0.06994EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/02/04 12:00 a.m.•2 views

PT-2020-19419

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A custom template select expression language injection remote code execution issue was discovered. This allows for remote code execution. Recommendations For...

10CVSS0.06895EPSS
SaveExploits0References5
CNVD
CNVD
•added 2020/01/22 12:00 a.m.•20 views

Jama Connect Cross-Site Scripting Vulnerability

Jama Connect is an application lifecycle management product that can be deployed in the cloud or installed on Mac and Windows devices. A cross-site scripting vulnerability exists in Jama Connect 8.44.0. The vulnerability can be exploited to conduct a cross-site scripting attack via the Select...

6.1CVSS6.3AI score0.00686EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2020/01/08 9:58 a.m.•52 views

CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

7.5CVSS6.7AI score0.0681EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/01/02 12:00 a.m.•21 views

PT-2020-10376 · Sqlite +6 · Sqlite +6

Name of the Vulnerable Software and Affected Versions: SQLite version 3.30.1 Description: The issue is related to the selectExpander function in the select.c file of SQLite. This function proceeds with WITH stack unwinding even after a parsing error occurs. Recommendations: For SQLite version...

9.8CVSS6.6AI score0.45426EPSS
SaveExploits8References216
CNVD
CNVD
•added 2020/01/02 12:00 a.m.•10 views

SQLite WITH Stack Expansion Vulnerability

SQLite is a self-contained, serverless, zero-configuration, transactional SQL database engine. SQLite 3.30.1 suffers from a WITH stack unfolding vulnerability that stems from the fact that selectExpander in select.c in SQLite continues to handle WITH stack unfolding even after a parsing error. No...

7.5CVSS8.9AI score0.0374EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/12/26 12:00 a.m.•10 views

SQLite Code Issue Vulnerability

SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. SQLite 3.30.1 version of the select.c file of the flattenSubquery there...

7.5CVSS6.7AI score0.0681EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/24 4:15 p.m.•15 views

DEBIAN-CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

7.5CVSS6.7AI score0.0681EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/24 4:15 p.m.•41 views

CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

7.5CVSS7.9AI score0.0681EPSS
SaveExploits0References12
AlpineLinux
AlpineLinux
•added 2019/12/24 4:15 p.m.•57 views

CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

7.5CVSS6.7AI score0.0681EPSS
SaveExploits0
Prion
Prion
•added 2019/12/24 4:15 p.m.•32 views

Null pointer dereference

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

5CVSS7.7AI score0.0681EPSS
SaveExploits0References10Affected Software9
UbuntuCve
UbuntuCve
•added 2019/12/24 4:15 p.m.•59 views

CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

7.5CVSS6.7AI score0.0681EPSS
SaveExploits0References2
OSV
OSV
•added 2019/12/24 4:15 p.m.•24 views

UBUNTU-CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

7.5CVSS6.7AI score0.0681EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/12/24 3:43 p.m.•41 views

CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

8AI score0.0681EPSS
SaveExploits0References10
CVE
CVE
•added 2019/12/24 3:43 p.m.•315 views

CVE-2019-19923

CVE-2019-19923 affects SQLite 3.30.1, specifically the flattenSubquery path in select.c. The vulnerability arises when using SELECT DISTINCT with a LEFT JOIN where the right-hand side is a view, leading to a NULL pointer dereference or incorrect results. The connected documents consistently descr...

7.5CVSS6.7AI score0.0681EPSS
SaveExploits0References12Affected Software1
Debian CVE
Debian CVE
•added 2019/12/24 3:43 p.m.•77 views

CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

7.5CVSS6.7AI score0.0681EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/24 12:00 a.m.•4 views

CVE-2019-19923: NULL Pointer Dereference

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

7.5CVSS6.6AI score0.0681EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/12/23 12:00 a.m.•13 views

SQLite Code Issue Vulnerability (CNVD-2020-22809)

SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. SQLite 3.30.1 version of the select.c file of multiSelect there is a co...

7.5CVSS7AI score0.08023EPSS
SaveExploits0References1
Rows per page
Query Builder