7143 matches found
sqlite.1065341.n5.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181370 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
[SECURITY] Fedora 32 Update: sqlite-3.32.1-1.fc32
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
SQLite Database DoS
The vulnerability of the build.c and prepare.c components of the SQLite database management system is related to the use of a null pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
CVE-2020-13632
A NULL pointer dereference flaw was found in the matchinfo auxiliary function of the SQLite FTS3 extension module. This flaw allows an attacker who can execute SQL statements to crash the application, resulting in a denial of service...
CVE-2020-13631
A flaw was found in the virtual table implementation of SQLite. This flaw allows an attacker who can execute SQL statements to rename a virtual table to the name of one of its shadow tables, leading to potential data corruption...
CVE-2020-13630
A use-after-free vulnerability was found in the SQLite FTS3 extension module in the way it implemented the snippet function. This flaw allows an attacker who can execute SQL statements to crash the application or potentially execute arbitrary code...
SQLite integrity_check Command Full Control
The vulnerability of the integritycheck command in the PRAGMA implementation of the SQLite database management system is related to insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the...
CVE-2020-13434
An integer overflow flaw was found in the SQLite implementation of the printf function. This flaw allows an attacker who can control the precision of floating-point conversions, to crash the application, resulting in a denial of service...
CVE-2020-13435
A NULL pointer dereference flaw was found in SQLite when rewriting select statements for window functions. This flaw allows an attacker who can execute SQL statements, to crash the application, resulting in a denial of service...
SQLite Unauthorized Operation Vulnerability
SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. There is a security vulnerability in versions prior to SQLite 3.32.0...
SQLite Code Issue Vulnerability (CNVD-2020-31166)
SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. A code issue vulnerability exists in the ext/fts3/fts3snippet.c file in...
SQLite Resource Management Error Vulnerability (CNVD-2020-31117)
SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. A resource management error vulnerability exists in the 'snippet'...
Multiple Apple Products SQLite Component Out-of-Bounds Read Vulnerability
Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablet computers.Apple macOS Catalina is a specialized operating system developed for Mac computers.SQLite is one of the most popular operating systems developed by American software develop...
CVE-2020-13632
ext/fts3/fts3snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo query...
DEBIAN-CVE-2020-13632
ext/fts3/fts3snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo query...
AZL-38578 CVE-2020-13632 affecting package ceph for versions less than 18.2.1-1
ext/fts3/fts3snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo query...
CVE-2020-13632
ext/fts3/fts3snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo query...
AZL-38929 CVE-2020-13631 affecting package ceph for versions less than 18.2.1-1
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c...