CVE-2026-13435

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation...

CVE-2026-13435

creationtimestamp| type| source ---|---|--- 2026-07-30 17:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruz32o3ut2z 2026-07-30 20:01:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva7pcn7k2e 2026-08-05 04:07:08+00:00| seen|...

CVE-2026-13435

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation...

Security Bulletin: Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure

Summary The Python Interpreter component and legacy Python REPL Tool component provided flow and agent authors the ability to execute Python code within a scoped globals environment restricted to an operator-configured import allow-list and curated safe builtins. An attacker who could provide inp...

Azure Linux 3.0 Security Update: ceph / libdb (CVE-2020-13435)

The version of ceph / libdb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-13435 advisory. - SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. CVE-2020-13435 Note...

MiracleLinux 8 : sqlite-3.26.0-15.el8 (AXSA:2021-2598:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2598:02 advisory. sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces CVE-2019-5827 sqlite: dropping of shadow tables not restricted in...

CVE-2025-13435

A security vulnerability has been detected in Dreampie Resty up to 1.3.1.SNAPSHOT. This affects the function Request of the file /resty-httpclient/src/main/java/cn/dreampie/client/HttpClient.java of the component HttpClient Module. Such manipulation of the argument filename leads to path traversa...

CVE-2025-13435

A security vulnerability has been detected in Dreampie Resty up to 1.3.1.SNAPSHOT. This affects the function Request of the file /resty-httpclient/src/main/java/cn/dreampie/client/HttpClient.java of the component HttpClient Module. Such manipulation of the argument filename leads to path traversa...

CVE-2025-13435

creationtimestamp| type| source ---|---|--- 2025-11-20 04:02:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5zv3scjny2k...

CVE-2025-13435

Dreampie Resty has a path traversal vulnerability (CVE-2025-13435) affecting HttpClient.java in Resty versions up to 1.3.1.SNAPSHOT. The issue arises from improper handling of the filename argument in Request, enabling potential remote exploitation. The vulnerability is described as highly comple...

Siemens SIMATIC S7-1500 NULL Pointer Dereference (CVE-2020-13435)

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504279;...

mingw-sqlite security update

3.26.0.0-2 - Fix CVE-2019-5827 CVE-2019-13750 CVE-2019-13751 - Fix CVE-2019-19603 CVE-2020-13435 CVE-2020-35527 - Fix CVE-2020-35525 CVE-2022-35737 CVE-2020-24736 - Fix CVE-2023-7104 - Fix CVE-2025-6965 Resolves: RHEL-103830...

TencentOS Server 3: sqlite (TSSA-2022:0173)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0173 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2020-13435 affecting package libdb for versions less than 5.3.28-9

CVE-2020-13435 affecting package libdb for versions less than 5.3.28-9. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2020-13435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. CVE-2020-13435 Note that Nessus relies on the presence of the package as...

CVE-2024-13435

The Ebook Downloader plugin for WordPress is vulnerable to SQL Injection via the 'download' parameter in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2024-13435

creationtimestamp| type| source ---|---|--- 2025-02-12 09:28:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113990205053620079 2025-02-12 10:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwwvibcu2p 2025-02-12 11:11:35+00:00|...

K000148486: SQLite vulnerabilities CVE-2020-15358, CVE-2020-13632, CVE-2020-13435, and CVE-2020-13434

Security Advisory Description CVE-2020-15358 In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation. CVE-2020-13632 ext/fts3/fts3snippet.c in SQLite before 3.32.0...

CVE-2020-13435 affecting package ceph for versions less than 18.2.1-1

CVE-2020-13435 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CLSA-2022-1665428733 Fix CVE(s): CVE-2020-13435, CVE-2020-13425

SECURITY UPDATE: segfault in sqlite3ExprCodeTarget - debian/patches/CVE-2020-13435.patch: tries to prevent a recurrence of problems. - CVE-2020-13425...