Lucene search
+L

43 matches found

Vulnrichment
Vulnrichment
added 2025/09/08 2:51 p.m.5 views

CVE-2025-7709 Out Of Bounds write in FTS5 Extension in SQLite

An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to partially controlled data can then be written out of bounds...

6.9CVSS6.5AI score0.00345EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/07 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-7709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array of tombstone pointers is calculated and...

6.9CVSS6.4AI score0.00345EPSS
SaveExploits0References2
Circl
Circl
added 2025/09/05 10:31 p.m.30 views

CVE-2025-7709

creationtimestamp| type| source ---|---|--- 2025-09-05 22:31:13+00:00| seen| https://seclists.org/oss-sec/2025/q3/150 2025-09-05 22:31:13+00:00| seen| https://seclists.org/oss-sec/2025/q3/150 2025-09-05 22:31:13+00:00| seen| https://seclists.org/oss-sec/2025/q3/150 2025-09-05 22:31:13+00:00| seen...

6.9CVSS5.7AI score0.00345EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 12:48 a.m.10 views

CVE-2015-7709

The arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier allows remote attackers to bypass authentication and execute arbitrary commands via a series of crafted requests involving the ARKFSEXECCMD operation...

10CVSS8AI score0.78965EPSS
SaveExploits3References1
SQLite
SQLite
added 2025/01/01 12:00 a.m.13 views

SQLite report about CVE-2025-7709

An attacker who has complete control over the database content could create a corrupt FTS5 index resulting access to memory outside the bounds of an array due to integer overflow. Fixed on 2025-07-15...

6.9CVSS6AI score0.00345EPSS
SaveExploits0Affected Software1
Circl
Circl
added 2024/08/13 3:43 a.m.11 views

CVE-2024-7709

creationtimestamp| type| source ---|---|--- 2024-08-13 03:43:15+00:00| seen| https://t.me/cvedetector/2941 2024-08-17 14:01:59+00:00| seen| https://t.me/CveExploits/16...

6.9CVSS4.5AI score0.00442EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/08 5:40 p.m.23 views

GHSA-V5VG-G7RQ-363W Prototype Pollution in json-pointer

This affects versions of package json-pointer up to and including 0.6.1. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

5.6CVSS5.8AI score0.01813EPSS
SaveExploits1References6
NVD
NVD
added 2021/11/03 6:15 p.m.98 views

CVE-2021-23820

This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

9.8CVSS0.01813EPSS
SaveExploits1References3
OSV
OSV
added 2021/11/03 6:15 p.m.8 views

CVE-2021-23820

This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

9.8CVSS6.8AI score0.01813EPSS
SaveExploits1References3
Prion
Prion
added 2021/11/03 6:15 p.m.34 views

Type confusion

This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

7.5CVSS7.3AI score0.01813EPSS
SaveExploits2References3
Snyk
Snyk
added 2021/08/31 3:48 p.m.9 views

Prototype Pollution

Overview json-pointer is a set of utilities for JSON pointers described by RFC 6901 Affected versions of this package are vulnerable to Prototype Pollution. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays. PoC const pointer =...

9.8CVSS7.6AI score0.01813EPSS
SaveExploits2References2
nodejs
nodejs
added 2021/05/10 6:40 p.m.50 views

Prototype Pollution

Overview json-pointer before 0.6.1 is vulnerable to prototype pollution. Multiple reference of object using slash is supported. Recommendation Upgrade to version 0.6.1 or later References - CVE - GitHub Advisory...

6.5CVSS4.2AI score0.01783EPSS
SaveExploits1Affected Software1
Circl
Circl
added 2020/10/05 12:26 p.m.25 views

CVE-2020-7709

creationtimestamp| type| source ---|---|--- 2020-10-05 12:26:53+00:00| seen| https://t.me/cibsecurity/15042 2021-11-03 21:23:24+00:00| seen| https://t.me/cibsecurity/31764 2025-03-06 02:16:32+00:00| seen| Telegram/5Po-rRJ6sich4EZN5FageLUhiZbI1ydUPANPdiBuGfsReJA...

7.2CVSS6.8AI score0.01783EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2020/10/05 8:15 a.m.34 views

CVE-2020-7709

This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...

7.2CVSS6.8AI score0.01783EPSS
SaveExploits1References4
CVE
CVE
added 2020/10/05 7:50 a.m.125 views

CVE-2020-7709

CVE-2020-7709 affects the json-pointer package prior to 0.6.1. A type confusion vulnerability occurs when pointer components are arrays, which can bypass the fix for CVE-2020-7709. The issue has been echoed downstream in related advisories (e.g., CVE-2021-23820) and is discussed in npm advisory e...

7.2CVSS6.2AI score0.01783EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2020/10/05 7:50 a.m.58 views

CVE-2020-7709 Prototype Pollution

This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...

6CVSS6.3AI score0.01783EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
added 2017/10/03 10:04 p.m.10 views

dicionarioinformal.com.br XSS vulnerability

Vulnerable URL: http://www.dicionarioinformal.com.br/'%22--!%3E%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E%20/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7709 VIP...

6.3AI score
SaveExploits0
CVE
CVE
added 2017/05/11 2:01 p.m.32 views

CVE-2016-7709

CVE-2016-7709 is rejected/not used and does not represent an active vulnerability entry.

6.9AI score
SaveExploits0
Cvelist
Cvelist
added 2017/05/11 2:01 p.m.12 views

CVE-2014-7709

...

SaveExploits0
Cvelist
Cvelist
added 2017/05/11 2:01 p.m.13 views

CVE-2016-7709

...

SaveExploits0
Rows per page
Query Builder