Lucene search
+L

6743 matches found

attackerkb
attackerkb
•added 2026/03/12 12:00 a.m.•12 views

CVE-2025-70873

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...

7.3AI score0.00458EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/03/12 12:00 a.m.•13 views

CVE-2025-70873

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...

7.2AI score0.00458EPSS
SaveExploits1References3
CVE
CVE
•added 2026/03/12 12:00 a.m.•249 views

CVE-2025-70873

The SQLite database management system (v3.51.1 and earlier) contains an information disclosure vulnerability in the zipfileInflate function of the zipfile extension . The root cause is improper cleaning of dynamic memory , which allows a remote attacker to obtain heap memory by supplying a specia...

7.5CVSS7.2AI score0.00458EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2026/03/12 12:00 a.m.•22 views

CVE-2025-70873

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...

7.5CVSS7.1AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/03/12 12:00 a.m.•77 views

CVE-2025-70873

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...

7.5CVSS7.2AI score0.00458EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2026/03/12 12:00 a.m.•83 views

CVE-2025-70873

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...

7.5CVSS7.2AI score0.00458EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/03/11 12:00 a.m.•25 views

PT-2026-81856

Name of the Vulnerable Software and Affected Versions SQLite versions containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d and later Description A buffer overflow allows an attacker to cause a denial of service. This issue occurs within the ext/misc/sqlar.c...

4CVSS5.5AI score0.00191EPSS
SaveExploits1References17
ICS
ICS
•added 2026/03/10 12:00 a.m.•32 views

Siemens SIDIS Prime

SUMMARY SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a...

7.1AI score
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2026/03/06 7:45 p.m.•24 views

CVE-2026-28277

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

6.8CVSS6.2AI score0.0489EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/06 3:31 p.m.•26 views

EUVD-2018-21635

Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter in outmail and inmail modules. Attackers can also download the SQLite database file directly from the application...

7.1CVSS6.1AI score0.00202EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/06 3:16 p.m.•55 views

CVE-2026-2752

Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing the server to return verbose .NET stack traces. These error messages expose internal class names, method calls, and...

5.3CVSS0.00277EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/06 3:04 p.m.•57 views

CVE-2026-2752

Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing the server to return verbose .NET stack traces. These error messages expose internal class names, method calls, and...

5.3CVSS0.00277EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/06 1:16 p.m.•23 views

CVE-2018-25180

Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter in outmail and inmail modules. Attackers can also download the SQLite database file directly from the application...

7.1CVSS0.00202EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/06 12:19 p.m.•28 views

CVE-2018-25180

Maitra 1.7.2 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code via the mailid parameter in the outmail and inmail modules. The same flaw enables attackers to download the SQLite database file directly from the ...

7.1CVSS6.5AI score0.00202EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/06 12:19 p.m.•61 views

CVE-2018-25180 Maitra 1.7.2 SQL Injection and Database File Download

Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter in outmail and inmail modules. Attackers can also download the SQLite database file directly from the application...

7.1CVSS0.00202EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/06 12:19 p.m.•19 views

CVE-2018-25180 Maitra 1.7.2 SQL Injection and Database File Download

Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter in outmail and inmail modules. Attackers can also download the SQLite database file directly from the application...

7.1CVSS6.5AI score0.00202EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/06 12:00 a.m.•23 views

PT-2026-23692

Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter in outmail and inmail modules. Attackers can also download the SQLite database file directly from the application...

7.1CVSS6.1AI score0.00202EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/05 8:16 p.m.•28 views

CVE-2026-28277

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

7.2CVSS0.0489EPSS
SaveExploits0References1
PyPA
PyPA
•added 2026/03/05 8:16 p.m.•29 views

PYSEC-2026-83

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

7.2CVSS6.2AI score0.0489EPSS
SaveExploits0References1Affected Software1
osv_pysec
osv_pysec
•added 2026/03/05 8:16 p.m.•27 views

PYSEC-2026-83

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

7.2CVSS6.2AI score0.0489EPSS
SaveExploits0References1
Rows per page
Query Builder