Lucene search
K

4912 matches found

Prion
Prion
added 2023/04/19 4:15 a.m.17 views

Heap overflow

Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

6.8CVSS8.9AI score0.0112EPSS
Exploits0References10Affected Software3
UbuntuCve
UbuntuCve
added 2023/04/19 4:15 a.m.27 views

CVE-2023-2137

Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.1AI score0.0112EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/04/19 3:40 a.m.31 views

CVE-2023-2137

Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

9.2AI score0.0112EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2023/04/19 3:40 a.m.14 views

CVE-2023-2137

Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.9AI score0.0112EPSS
Exploits0References10
CVE
CVE
added 2023/04/19 3:40 a.m.216 views

CVE-2023-2137

The provided connected docs confirm CVE-2023-2137 affects Google Chrome/Chromium and its underlying SQLite component, with a heap buffer overflow in SQLite prior to Chrome 112.0.5615.137. The root cause is a heap corruption condition that could be triggered by a crafted HTML page, allowing remote...

8.8CVSS8.9AI score0.0112EPSS
Exploits0References10Affected Software1
Debian CVE
Debian CVE
added 2023/04/19 3:40 a.m.19 views

CVE-2023-2137

Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.7AI score0.0112EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2023/04/19 3:40 a.m.36 views

CVE-2023-2137

Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS9.2AI score0.0112EPSS
Exploits0
CNNVD
CNNVD
added 2023/04/19 12:0 a.m.4 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in SQLite in versions prior to Google Chrome 112.0.5615.137. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

8.8CVSS7.8AI score0.0112EPSS
Exploits0References15
Tenable Nessus
Tenable Nessus
added 2023/04/19 12:0 a.m.149 views

Google Chrome < 112.0.5615.137 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 112.0.5615.137. It is, therefore, affected by multiple vulnerabilities as referenced in the 202304stable-channel-update-for-desktop18 advisory. - Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed...

9.6CVSS8AI score0.05786EPSS
Exploits0References11
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.38 views

Security Bulletin: Vulnerabilities in ntp, libxml2, openssh, sqlite and python-base affect IBM BladeCenter Advanced Management Module (AMM)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities. Vulnerability Details: CVEID: CVE-2016-4953 Description: NTP is vulnerable ...

7.5CVSS8.4AI score0.44936EPSS
Exploits10
RedhatCVE
RedhatCVE
added 2023/04/13 6:30 a.m.31 views

CVE-2020-24736

A flaw was found in SQLite. A buffer overflow vulnerability allows a local attacker to cause a denial of service via a crafted script...

6.2CVSS5.4AI score0.00347EPSS
Exploits1References3
OSV
OSV
added 2023/04/11 6:15 p.m.1 views

DEBIAN-CVE-2020-24736

Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script...

5.5CVSS6.4AI score0.00347EPSS
Exploits1References1
Rosalinux
Rosalinux
added 2023/04/11 1:56 p.m.29 views

Advisory ROSA-SA-2023-2149

Software: sqlite 3.26.0 OS: ROSA Virtualization 2.1 packageevrstring: 3.26.0 CVE-ID: CVE-2019-19645 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC: Alter.c in SQLite before 3.30.1 allows attackers to trigger infinite recursion using certain types of self-referential views in conjunction with ALTER TABLE...

9.8CVSS8.2AI score0.11431EPSS
Exploits2
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.3 views

SQLite 安全漏洞

SQLite is a lightweight database that is ACID compliant relational database management system. A buffer overflow vulnerability exists in SQLite3 v.3.27.1, which stems from the presence of a buffer overflow vulnerability that can be exploited by a local attacker to cause a denial of service via a...

5.5CVSS6.1AI score0.00347EPSS
Exploits1References23
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/06 7:16 p.m.46 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in SQlite [CVE-2020-35527]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in SQlite caused by an out-of-bounds memory access flaw through ALTER TABLE for views that have a nested FROM clause CVE-2020-35527. SQlite is included as part of the Base OS used by...

9.8CVSS9.8AI score0.01029EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/31 5:0 p.m.47 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in SQLite (CVE-2022-35737)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in SQLite caused by an array-bounds overflow CVE-2022-35737. SQLite is included as part of the Base OS used by our service images. Please read the details for remediation below...

7.5CVSS7.6AI score0.11431EPSS
Exploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/31 4:40 p.m.45 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in SQlite (CVE-2020-35525)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in SQlite caused by a NULL pointer derreference flaw in the INTERSEC query processing. CVE-2020-35525. SQlite is included as part of the Base OS used by our service images. Please read the...

7.5CVSS8.1AI score0.00894EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/30 4:55 p.m.38 views

Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak. Freedesktop D-Bus is used by IBM Robotic Process Automation as part of container base images CVE-2022-42010, CVE-2022-42011, CVE-2022-42012. GNU Libtasn1 is used by IBM Robotic Process Automation as...

9.8CVSS10AI score0.22791EPSS
Exploits20Affected Software1
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.18 views

Mageia: Security Advisory (MGASA-2023-0013)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.3AI score0.02154EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.27 views

Mageia: Security Advisory (MGASA-2023-0094)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS7.4AI score0.00457EPSS
Exploits1References5
Rows per page
Query Builder