Lucene search
+L

5487 matches found

OSV
OSV
added 2023/09/09 11:06 a.m.9 views

OESA-2023-1622 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.8CVSS6.9AI score0.21132EPSS
SaveExploits6References8
BDU FSTEC
BDU FSTEC
added 2023/09/08 12:00 a.m.13 views

The vulnerability of the library for accessing and creating SQLite JDBC files is related to improper code generation. This allows an attacker to execute arbitrary code.

The vulnerability of the library for accessing and creating SQLite JDBC files is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.8AI score0.01592EPSS
SaveExploits0References4Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2023/09/07 6:21 p.m.49 views

Security Bulletin: There is a vulnerability in SQLite JDBC used by IBM Maximo Manage application in IBM Maximo Application Suite ( CVE-2023-32697)

Summary There is a vulnerability in SQLite JDBC used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2023-32697 DESCRIPTION: SQLite JDBC could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a flaw when JDB...

9.8CVSS9.2AI score0.01592EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/09/07 6:07 p.m.40 views

Security Bulletin: There is a vulnerabiliy in SQLite JDBC used by IBM Maximo Asset Management (CVE-2023-32697)

Summary There is a vulnerabiliy in SQLite JDBC used by IBM Maximo Asset Management. Vulnerability Details CVEID:CVE-2023-32697 DESCRIPTION: SQLite JDBC could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a flaw when JDBC url is attacker controlled. By...

9.8CVSS9.2AI score0.01592EPSS
SaveExploits0Affected Software11
The Hacker News
The Hacker News
added 2023/09/07 11:02 a.m.118 views

Alert: Apache Superset Vulnerabilities Expose Servers to Remote Code Execution Attacks

Patches have been released to address two new security vulnerabilities in Apache Superset that could be exploited by an attacker to gain remote code execution on affected systems. The update version 2.1.1 plugs CVE-2023-39265 and CVE-2023-37941, which make it possible to conduct nefarious actions...

9.8CVSS8.1AI score0.97405EPSS
SaveExploits19
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:00 a.m.41 views

Oracle Linux 8 : sqlite (ELSA-2020-0273)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0273 advisory. 3.26.0-4 - Fixed CVE-2019-13734 1786508 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

8.8CVSS8.1AI score0.04022EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:00 a.m.33 views

Oracle Linux 8 : sqlite (ELSA-2020-1810)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1810 advisory. - Fixed CVE-2019-13752 1786529 - Fixed CVE-2019-13753 1786535 - Fixed CVE-2019-13734 1786509 - Fixed CVE-2019-19924 1789776 - Fixed CVE-2019-19923...

9.8CVSS7.4AI score0.45426EPSS
SaveExploits0References8
Photon
Photon
added 2023/09/07 12:00 a.m.11 views

Critical Photon OS Security Update - PHSA-2023-5.0-91-0089

Updates of 'libssh', 'sqlite', 'openvswitch' packages of Photon OS have been released...

9.8CVSS6.7AI score0.01324EPSS
SaveExploits0
Photon
Photon
added 2023/09/07 12:00 a.m.71 views

Critical Photon OS Security Update - PHSA-2023-5.0-0089

Updates of 'sqlite', 'libssh', 'openvswitch' packages of Photon OS have been released...

6.5CVSS6.5AI score0.01061EPSS
SaveExploits2
F5 Networks
F5 Networks
added 2023/09/06 4:33 p.m.46 views

K000136109: PHP SQLite vulnerability CVE-2022-31631

Security Advisory Description In PHP versions 8.0. before 8.0.27, 8.1. before 8.1.15, 8.2. before 8.2.2 when using PDO::quote function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injectio...

9.1CVSS8.3AI score0.02171EPSS
SaveExploits0
OSV
OSV
added 2023/09/06 3:30 p.m.50 views

GHSA-FM4Q-J8G4-C9J4 Apache Superset Improper Input Validation vulnerability

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...

6.5CVSS5.6AI score0.83716EPSS
SaveExploits2References4
Github Security Blog
Github Security Blog
added 2023/09/06 3:30 p.m.44 views

Apache Superset Improper Input Validation vulnerability

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...

6.5CVSS6.8AI score0.83716EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2023/09/06 2:15 p.m.44 views

CVE-2023-39265

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...

6.5CVSS5AI score0.83716EPSS
SaveExploits2References2
Prion
Prion
added 2023/09/06 2:15 p.m.34 views

Design/Logic Flaw

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...

6.4CVSS6.7AI score0.83716EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/06 1:00 p.m.20 views

CVE-2023-39265 Apache Superset: Possible Unauthorized Registration of SQLite Database Connections

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...

3.8CVSS6.9AI score0.83716EPSS
SaveExploits2References2
CVE
CVE
added 2023/09/06 1:00 p.m.82 views

CVE-2023-39265

CVE-2023-39265 : Multiple connected documents describe a vulnerability in Apache Superset where SQLite database connections can be registered incorrectly when using alternative driver names (e.g., sqlite+pysqlite) or via database imports. This may allow arbitrary file creation on Superset webserv...

6.5CVSS5.7AI score0.83716EPSS
SaveIn wildExploits2References2Affected Software1
Cvelist
Cvelist
added 2023/09/06 1:00 p.m.52 views

CVE-2023-39265 Apache Superset: Possible Unauthorized Registration of SQLite Database Connections

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...

3.8CVSS6.9AI score0.83716EPSS
SaveExploits2References2
OSV
OSV
added 2023/09/06 1:00 p.m.30 views

CVE-2023-39265 Apache Superset: Possible Unauthorized Registration of SQLite Database Connections

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...

3.8CVSS6.7AI score
SaveExploits0References4
Kitploit
Kitploit
added 2023/09/06 11:30 a.m.33 views

ICMPWatch - ICMP Packet Sniffer

ICMP Packet Sniffer is a Python program that allows you to capture and analyze ICMP Internet Control Message Protocol packets on a network interface. It provides detailed information about the captured packets, including source and destination IP addresses, MAC addresses, ICMP type, payload data,...

7AI score
SaveExploits0References1
CNNVD
CNNVD
added 2023/09/06 12:00 a.m.11 views

Apache Superset 输入验证错误漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. A security bypass vulnerability exists in Apache Superset version 2.1.0 and earlier, which can be exploited by an attacker to register a SQLite database connection...

6.5CVSS6.7AI score0.83716EPSS
SaveExploits2References3
Rows per page
Query Builder