Lucene search
+L

7843 matches found

OSV
OSV
•added 2018/03/17 12:29 a.m.•10 views

DEBIAN-CVE-2018-8740

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

7.5CVSS8.5AI score0.07966EPSS
SaveExploits0References1
OSV
OSV
•added 2018/03/17 12:29 a.m.•12 views

ALPINE-CVE-2018-8740

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

7.5CVSS6.9AI score0.07966EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2018/03/17 12:29 a.m.•8 views

CVE-2018-8740

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

7.5CVSS5.5AI score0.07966EPSS
SaveExploits0References21
OSV
OSV
•added 2018/03/17 12:29 a.m.•12 views

UBUNTU-CVE-2018-8740

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

7.5CVSS6.7AI score0.07966EPSS
SaveExploits0References5
Prion
Prion
•added 2018/03/17 12:29 a.m.•32 views

Null pointer dereference

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

5CVSS7.2AI score0.07966EPSS
SaveExploits0References14Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/17 12:00 a.m.•3 views

CVE-2018-8740: NULL Pointer Dereference

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

7.5CVSS6.3AI score0.07966EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2018/03/17 12:00 a.m.•111 views

CVE-2018-8740

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

7.5CVSS7.6AI score0.07966EPSS
SaveExploits0
CVE
CVE
•added 2018/03/17 12:00 a.m.•427 views

CVE-2018-8740

SQLite through 3.22.0 is vulnerable to a NULL pointer dereference when a database schema is corrupted via CREATE TABLE AS. The underlying issue is in build.c/prepare.c. The impact is a potential crash (denial of service). Affected disclosures across Debian, Cloud Foundry, and distro advisories co...

7.5CVSS7.3AI score0.07966EPSS
SaveExploits0References14Affected Software1
Debian CVE
Debian CVE
•added 2018/03/17 12:00 a.m.•58 views

CVE-2018-8740

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

7.5CVSS7.7AI score0.07966EPSS
SaveExploits0
OSV
OSV
•added 2018/03/16 1:29 p.m.•19 views

CVE-2016-10715

The Artezio Kanban Board plugin 1.4 revision 1914 for Atlassian Jira has XSS via the Board Name in a Create New Board action, related to an artezioboard/mainPage.jspa?kanbanId=7/kanban-view URI...

5.4CVSS5.8AI score0.00549EPSS
SaveExploits0References1
OSV
OSV
•added 2018/03/16 1:29 p.m.•8 views

CVE-2016-10716

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

5.4CVSS5.8AI score0.00713EPSS
SaveExploits0References2
Prion
Prion
•added 2018/03/16 1:29 p.m.•21 views

Information disclosure

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

3.5CVSS6AI score0.00713EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2018/03/16 1:29 p.m.•26 views

CVE-2016-10716

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

5.4CVSS5.3AI score0.00713EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/03/16 1:00 p.m.•32 views

CVE-2016-10716

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

5.3AI score0.00713EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/16 12:00 a.m.•4 views

CVE-2016-10716: Improper Neutralization of Input During Web Page Generation

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

5.4CVSS6AI score0.00713EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/03/16 12:00 a.m.•1 views

PT-2018-3489

Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.22.0 Description: The issue is related to a NULL pointer dereference in the SQLite database management system. It occurs when a database's schema is corrupted using a CREATE TABLE AS statement, specifically involvin...

9.8CVSS0.08609EPSS
SaveExploits1References195
FreeBSD
FreeBSD
•added 2018/03/16 12:00 a.m.•43 views

SQLite -- Corrupt DB can cause a NULL pointer dereference

MITRE reports: SQLite databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

7.5CVSS1.1AI score0.07966EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/02/26 12:00 a.m.•16 views

PT-2018-3974 · Google +2 · Android Kernel +2

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible use after free due to a race condition in the pppol2tp create function of l2tp ppp.c. This could lead to local escalation of privilege,...

7.8CVSS7.2AI score0.93838EPSS
SaveExploits31References154
Cvelist
Cvelist
•added 2018/02/20 3:00 p.m.•39 views

CVE-2018-7205

Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote attackers to execute malicious JavaScript via a malicious devicename parameter in a link that is entered via the "Pages - Edit template properties - Device Layouts - Create devic...

5.2AI score0.0083EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/12 12:00 a.m.•6 views

CVE-2018-6888: Cross-Site Request Forgery (CSRF)

An issue was discovered in Typesetter 5.1. The User Permissions page aka Admin/Users suffers from critical flaw of Cross Site Request forgery: using a forged HTTP request, a malicious user can lead a user to unknowingly create / delete or modify a user account due to the lack of an anti-CSRF toke...

8CVSS7.4AI score0.01926EPSS
SaveExploits4References2
Rows per page
Query Builder