Lucene search
K

4901 matches found

CNVD
CNVD
added 2015/07/02 12:0 a.m.1 views

Apple iOS SQLite Buffer Overflow Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Multiple buffer overflows in the printf implementation of Apple iOS SQLite allow attackers to exploit vulnerabilities to conduct denial of service attacks or execute arbitrary code...

7.5CVSS7.4AI score0.04421EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2015/07/02 12:0 a.m.26 views

CVE-2015-3659

The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cau...

6.8CVSS7.5AI score0.02766EPSS
Exploits0References6
OSV
OSV
added 2015/07/02 12:0 a.m.1 views

UBUNTU-CVE-2015-3659

The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cau...

6.8CVSS7.6AI score0.02766EPSS
Exploits0References7
Zero Day Initiative
Zero Day Initiative
added 2015/07/01 12:0 a.m.91 views

SQLite printf Format String Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SQLite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the print...

5.1CVSS7AI score0.04421EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/07/01 12:0 a.m.38 views

WebKit WebSQL ALTER TABLE Authorization Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of WebSQL. T...

7.5CVSS8.9AI score0.01998EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/07/01 12:0 a.m.42 views

SQLite Default Value Authorization Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SQLite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of DEFAULT...

7.5CVSS8.8AI score0.02766EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/07/01 12:0 a.m.65 views

Mac OS X Multiple Vulnerabilities (Security Update 2015-005) (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-005. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl -...

10CVSS8.2AI score0.9986EPSS
Exploits45References73
Tenable Nessus
Tenable Nessus
added 2015/07/01 12:0 a.m.90 views

Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.4. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl - AppleThunderboltEDMService - ATS - Bluetooth -...

10CVSS8.3AI score0.9986EPSS
Exploits45References73
OwnCloud
OwnCloud
added 2015/06/24 4:10 p.m.45 views

Server: Local file inclusion on MS Windows Platform

Due to an improper control of the filename for a requireonce statement in the routing component a limited local file inclusion vulnerability is existent in all below mentioned ownCloud versions when running on the MS Windows Platform. Depending on the ownCloud configuration and the authentication...

10CVSS2.1AI score0.2482EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/06/24 12:0 a.m.95 views

PHP 5.6.x < 5.6.10 Multiple Vulnerabilities

According to its banner, the version of PHP 5.6.x running on the remote web server is prior to 5.6.10. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist in the bundled Perl-Compatible Regular Expression PCRE library due to improper validatio...

10CVSS8AI score0.16512EPSS
Exploits5References10
OSV
OSV
added 2015/06/14 12:0 a.m.41 views

DSA-3252-2 sqlite3 - security update

Bulletin has no description...

7.5CVSS6.6AI score0.05531EPSS
Exploits0
Packet Storm
Packet Storm
added 2015/06/12 12:0 a.m.37 views

D-Link DSP-W110 Command Execution / SQL Injection / File Upload

D-Link DSP-W110 - multiple vulnerabilities ---- Discovered by: ---- Peter Adkins ---- Access: ---- Local network; unauthenticated access. ---- Tracking and identifiers: ---- CVE - None allocated. ---- Platforms / Firmware confirmed affected: ---- D-Link DSP-W110 Rev A - v1.05b01 ---- Notes: ----...

7.4AI score
Exploits0
CNVD
CNVD
added 2015/05/11 12:0 a.m.1 views

SQLite 'src/where.c' Memory Corruption Vulnerability

SQLite is an embedded database. SQLite has a remote memory corruption vulnerability in the 'src/where.c' implementation. An attacker can exploit this vulnerability to execute arbitrary code...

7.7AI score
Exploits0References1
OpenVAS
OpenVAS
added 2015/05/06 12:0 a.m.45 views

Debian Security Advisory DSA 3252-1 (sqlite3 - security update)

Michal Zalewski discovered multiple vulnerabilities in SQLite, which may result in denial of service or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb3252.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3252-1 using nvtgen 1.0 Script version: 1.0...

7.5CVSS0.6AI score0.05531EPSS
Exploits0References1
securityvulns
securityvulns
added 2015/05/05 12:0 a.m.64 views

SQLite multiple security vulnerabilities

Over 20 errors, including uninitialized memory access...

7.5CVSS4.5AI score0.05531EPSS
Exploits0References2Affected Software1
myhack58
myhack58
added 2015/04/30 12:0 a.m.16 views

SQLite denial of service vulnerability-vulnerability warning-the black bar safety net

Affected system: SQLite SQLite 3.8.9 Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 5-3 4 1 4 SQLite is an embedded database. SQLite 3.8.9 the previous version, there is no correct implementation of the collation sequence name is...

1.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/04/28 12:0 a.m.56 views

Fedora 20 : php-5.5.24-1.fc20 (2015-6399)

16 Apr 2015, PHP 5.5.24 Apache2handler : - Fixed bug 69218 potential remote code execution with apache 2.4 apache2handler. Gerrit Venema Core : - Fixed bug 66609 php crashes with get and ++ operator in some cases. Dmitry, Laruence - Fixed bug 67626 User exceptions not properly handled in streams...

7.5CVSS7.8AI score0.38434EPSS
Exploits4References13
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.5 views

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the mono-data-sqlite package of the SUSE Linux Enterprise operating system can lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

7.5CVSS5.4AI score0.04901EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.4 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libqt3c102-mt-sqlite package of the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

7.5CVSS5.4AI score0.04203EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.3 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libqt3c102-sqlite package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

7.5CVSS5.4AI score0.04203EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder