datasette-sqlite-vec (>=0.1.1a2, <=0.1.3a3), sqlite-utils-sqlite-vec (>=0.1.1a2, <=0.1.3a3) +1 more potentially affected by CVE-2024-46488 via sqlite-vec (>=0.1.1a2, <=0.1.3a3)

sqlite-vec PYPI version =0.1.1a2, =0.1.1a2, =0.1.1a2, =0.1.3a3 - zf-memician 0.1.3 Source cves: CVE-2024-46488 Source advisory: GHSA-VRCX-GX3G-J3H8...

Heap-based Buffer Overflow in sqlite-vec

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2024-8877

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

CVE-2024-8877

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

sqlite-vec security vulnerability

sqlite-vec is a SQLite extension from the individual developer Alex Garcia. A security vulnerability exists in sqlite-vec version v0.1.1, which stems from the presence of a heap buffer overflow that allows an attacker to cause a denial of service DoS via a crafted file...

PT-2024-32012

Name of the Vulnerable Software and Affected Versions sqlite-vec version 0.1.1 Description The issue is related to a heap buffer overflow via the npy token next function, allowing attackers to cause a Denial of Service DoS via a crafted file. Recommendations For sqlite-vec version 0.1.1, upgrade ...

CVE-2024-8877: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

Heap-based Buffer Overflow in sqlite-vec

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file. Workaround for CVE in release 0.1.3...

CVE-2024-46488: Out-of-bounds Write

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

datasette-sqlite-vec (>=0.1.1a2, <=0.1.3a3), sqlite-utils-sqlite-vec (>=0.1.1a2, <=0.1.3a3) +1 more potentially affected by CVE-2024-46488 via sqlite-vec (>=0.1.1a2, <=0.1.3a3)

sqlite-vec PYPI version =0.1.1a2, =0.1.1a2, =0.1.1a2, =0.1.3a3 - zf-memician 0.1.3 Source cves: CVE-2024-46488 Source advisory: MEND:CVE-2024-46488...

CVE-2024-46488

The sqlite-vec extension (v0.1.1) is vulnerable to a heap buffer overflow within the npy_token_next function. An attacker can exploit this flaw by providing a crafted file , resulting in a Denial of Service (DoS) . To resolve this issue, users are recommended to upgrade to version 0.1.3 .

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2024-8877 SQL Injection

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

CVE-2024-8877

Riello Netman 204 contains a SQL injection in three CGI endpoints: /cgi-bin/db_datalog_w.cgi, /cgi-bin/db_eventlog_w.cgi, and /cgi-bin/db_multimetr_w.cgi. The Nuclei template details unauthenticated SQLi that lets an attacker modify collected log data. The CVE description confirms the issue is li...

CVE-2024-8877 SQL Injection

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2024-2490)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file...