51 matches found
Ubuntu 16.04 LTS / 18.04 LTS : SQLite vulnerabilities (USN-4298-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4298-1 advisory. It was discovered that SQLite incorrectly handled certain shadow tables. An attacker could use this issue to cause SQLite to crash, resulting...
USN-4298-1: SQLite vulnerabilities
It was discovered that SQLite incorrectly handled certain shadow tables. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2019-13734, CVE-2019-13750, CVE-2019-13753 It was discovered that SQLite incorrectly handle...
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-1180)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-1132)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-20218
selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error...
CVE-2019-20218
selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error...
CVE-2019-20218
selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error...
CVE-2019-20218
CVE-2019-20218 affects SQLite: in selectExpander (select.c) the WITH stack unwinding continues after a parsing error, potentially causing an application crash. The issue is confirmed across multiple advisories (Debian LTS/DLA entries, Gentoo GLSA, AlmaLinux advisory, Cloud Foundry USN) and is lis...
CVE-2018-20218
Summary (CVE-2018-20218): Teracue ENC-400 devices running firmware 2.56 or below are affected by a command-injection vulnerability in the login form. The issue arises because the login input is passed directly to a shell command in /usr/share/www/check.lp without escaping or validation, enabling ...
Teracue ENC-400 Command Injection / Missing Authentication
Introduction ============ Multiple vulnerabilities were identified within the Teracue ENC-400, including pre-authenticated remote code authentication. While the vendor has released updated firmware after these issues were identified, they are not all resolved with the latest version of the...
