819 matches found
EUVD-2019-14625
Malware in sbrugna...
EUVD-2020-17447
Malware in sbrugna...
EUVD-2025-14089
Malicious code in bioql PyPI...
EUVD-2025-3946
Malicious code in bioql PyPI...
EUVD-2022-1694
Malicious code in bioql PyPI...
EUVD-2023-1051
Malicious code in bioql PyPI...
EUVD-2025-23567
Malicious code in bioql PyPI...
CVE-2025-59163
vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...
vet MCP Server SSE Transport DNS Rebinding Vulnerability
SafeDep vet is vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. To exploit this vulnerability following conditions must be met: 1. A vet scan is executed and reports are saved as sqlite3 database 2. A vet MCP server is running on default port with SSE...
CVE-2025-59163: Reliance on Reverse DNS Resolution for a Security-Critical Action
vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...
org.webjars.npm:better-sqlite3 (12.11.1), org.webjars.npm:image-thumbnail (1.0.15) +4 more potentially affected by CVE-2025-59343 via org.webjars.npm:tar-fs (2.1.5)
org.webjars.npm:tar-fs MAVEN version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:tar-fs and may be impacted: - org.webjars.npm:better-sqlite3 12.11.1 - org.webjars.npm:image-thumbnail 1.0.15 - org.webjars.npm:pkg-fetch 3.4.2 -...
Ubuntu: Security Advisory (USN-7751-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2025:20674-1 Security update for sqlite3
This update for sqlite3 fixes the following issues: - CVE-2025-6965: Fixed integer truncation bsc1246597...
Security update for sqlite3
This update for sqlite3 fixes the following issues: CVE-2025-6965: Fixed integer truncation bsc1246597. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...
Linux Distros Unpatched Vulnerability : CVE-2025-7709
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array of tombstone pointers is calculated and...
Linux Distros Unpatched Vulnerability : CVE-2022-43441
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node- sqlite3 5.1.1. A specially-crafted Javascript file can...
SQL Injection
adodb/adodb-php is vulnerable to SQL Injection. The vulnerability is due to improper escaping of query parameters due to crafted table names being passed to the metaColumns, metaForeignKeys, or metaIndexes methods when connected to a sqlite3 database...
Linux Distros Unpatched Vulnerability : CVE-2022-21227
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid...
EulerOS 2.0 SP11 : sqlite (EulerOS-SA-2025-1969)
According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service application crash. A...