32 matches found
UBUNTU-CVE-2025-29087
In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concatws SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string e.g., 2MB or more, an integer overflow occurs in calculating the size of the...
CVE-2025-29087
In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concatws SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string e.g., 2MB or more, an integer overflow occurs in calculating the size of the...
CVE-2025-29087
creationtimestamp| type| source ---|---|--- 2025-04-07 19:45:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10762 2025-04-07 22:55:44+00:00| seen| https://t.me/cvedetector/22344 2025-04-08 15:48:09+00:00| seen|...
SQLite report about CVE-2025-3277CVE-2025-29087
A bug in the concatws SQL function can cause a write past the end of an array obtained from malloc. If an attacker can control the first argument to concatws, so that the separator string is large - more than 2MB - then an integer overflow in the calculation of the size of the result buffer might...
SQLite report about CVE-2025-29087
Duplicate of CVE-2025-3277...
CVE-2022-29087
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2023-29087
creationtimestamp| type| source ---|---|--- 2023-04-15 00:26:19+00:00| seen| https://t.me/cibsecurity/62194 2023-05-16 13:31:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8307...
CVE-2023-29087
CVE-2023-29087 concerns memory corruption in Samsung Exynos components (Mobile Processor, Automotive Processor and Modem) including Exynos Modem 5123, 5300, Exynos 980, 1080, 9110 and Exynos Auto T5123. The issue arises from insufficient parameter validation while decoding an SIP Retry-After head...
Synology DiskStation Manager (DSM) 6.2.x < 6.2.3-25426-3 Multiple Vulnerabilities (Synology-SA-20:26) - Remote Known Vulnerable Versions Check
Synology DiskStation Manager DSM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2021-29087
CVE-2021-29087 affects Synology DiskStation Manager (DSM) webapi component. A path traversal flaw in DSM versions before 6.2.3-25426-3 could allow remote attackers to write arbitrary files via unspecified vectors. Impact statements in linked sources indicate arbitrary file writes, with CVSS metri...
CVE-2021-29087
Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in webapi component in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows remote attackers to write arbitrary files via unspecified vectors...