Lucene search
+L

7143 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/21 12:00 a.m.•12 views

CVE-2020-9327: NULL Pointer Dereference

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations...

7.5CVSS7.1AI score0.03727EPSS
SaveExploits0References24
Broadcom
Broadcom
•added 2020/02/21 12:00 a.m.•31 views

CVE-2019-19317, CVE-2019-19603, CVE-2019-19880 - Multiple vulnerabilities in SQLite 3.30.1. (BSA-2020-895).

Security Advisory ID: BSA-2020-895 Component: SQLite Revision : 2.0: Final Multiplevulnerabilities inSQLite 3.30.1 CVE-2019-19317 lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or...

9.8CVSS6.7AI score0.10983EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/02/21 12:00 a.m.•26 views

PT-2020-3308

Name of the Vulnerable Software and Affected Versions SQLite version 3.31.1 Description The issue is related to the isAuxiliaryVtabOperator component in the SQLite database management system, which is associated with pointer dereference errors. This can allow a remote attacker to cause a denial o...

7.8CVSS6.7AI score0.03727EPSS
SaveExploits0References120
Positive Technologies
Positive Technologies
•added 2020/02/20 12:00 a.m.•13 views

PT-2022-8933

Name of the Vulnerable Software and Affected Versions SQLite version 3.31.1 Description A potential null pointer dereference was found in the INTERSEC query processing. Recommendations For SQLite version 3.31.1, update to a newer version to mitigate the risk...

9.8CVSS6.5AI score0.01661EPSS
SaveExploits0References38
osv_opensuse
osv_opensuse
•added 2020/02/19 9:14 a.m.•17 views

OPENSUSE-SU-2020:0233-1 Security update for chromium, re2

This update for chromium, re2 fixes the following issues: - Update to 80.0.3987.87 boo1162833: CVE-2020-6381: Integer overflow in JavaScript CVE-2020-6382: Type Confusion in JavaScript CVE-2019-18197: Multiple vulnerabilities in XML CVE-2019-19926: Inappropriate implementation in SQLite...

8.8CVSS6.9AI score0.08023EPSS
SaveExploits19References40
OPENSUSE Linux
OPENSUSE Linux
•added 2020/02/19 12:00 a.m.•109 views

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2020:0233-1 Rating: important References: 1162833 Cross-References: CVE-2019-18197 CVE-2019-19880 CVE-2019-19923 CVE-2019-19925 CVE-2019-19926 CVE-2020-6381 CVE-2020-6382 CVE-2020-6385 CVE-2020-6387...

8.8CVSS6.8AI score0.08023EPSS
SaveExploits19References1
Tenable Nessus
Tenable Nessus
•added 2020/02/18 12:00 a.m.•60 views

RHEL 6 : chromium-browser (RHSA-2020:0514)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0514 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 80.0.3987.87. Security Fixes:...

8.8CVSS6.8AI score0.08023EPSS
SaveExploits19References82
RedHat Linux
RedHat Linux
•added 2020/02/17 9:31 a.m.•19 views

sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive...

7.5CVSS7.4AI score0.0681EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/02/17 9:31 a.m.•122 views

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

8.8CVSS6.6AI score0.08023EPSS
SaveExploits19References39
RedHat Linux
RedHat Linux
•added 2020/02/17 9:31 a.m.•21 views

sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

7.5CVSS6.7AI score0.0681EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/02/17 9:31 a.m.•18 views

sqlite: invalid pointer dereference in exprListAppendList in window.c

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS7.2AI score0.06937EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/02/17 9:31 a.m.•13 views

sqlite: Out-of-bounds read in SELECT with ON/USING clause

An out-of-bounds read vulnerability was found in the SQLite component of the Chromium browser. A remote attacker could abuse this flaw to obtain potentially sensitive information from process memory via a crafted HTML page. The highest threat from this vulnerability is to data confidentiality...

6.5CVSS7.3AI score0.02625EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2020/02/17 9:31 a.m.•16 views

sqlite: error mishandling because of incomplete fix of CVE-2019-19880

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

7.5CVSS7AI score0.08023EPSS
SaveExploits0References4
Amazon
Amazon
•added 2020/02/17 12:00 a.m.•147 views

Important: sqlite

Issue Overview: Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2019-13734 Affected Packages: sqlite Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit th...

8.8CVSS8.6AI score0.03948EPSS
SaveExploits0
NVD
NVD
•added 2020/02/12 8:15 p.m.•47 views

CVE-2011-3901

Android SQLite Journal before 4.0.1 has an information disclosure vulnerability...

7.5CVSS7.2AI score0.00675EPSS
SaveExploits2References2
Prion
Prion
•added 2020/02/12 8:15 p.m.•33 views

Information disclosure

Android SQLite Journal before 4.0.1 has an information disclosure vulnerability...

5CVSS6.7AI score0.00675EPSS
SaveExploits2References2Affected Software1
Mend
Mend
•added 2020/02/12 7:43 p.m.•8 views

CVE-2011-3901

Android SQLite Journal before 4.0.1 has an information disclosure vulnerability...

8.7CVSS0.00675EPSS
SaveExploits2References2
CVE
CVE
•added 2020/02/12 7:43 p.m.•105 views

CVE-2011-3901

CVE-2011-3901 affects Android's SQLite journal handling. The vulnerability arises because the journal file of SQLite databases in the Android data directory can be read by all applications, due to permissions on the data directory (/data/data//databases) and the journal itself. Impacted versions ...

7.5CVSS7.1AI score0.00675EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2020/02/12 7:43 p.m.•59 views

CVE-2011-3901

Android SQLite Journal before 4.0.1 has an information disclosure vulnerability...

7.2AI score0.00675EPSS
SaveExploits2References2
osv_opensuse
osv_opensuse
•added 2020/02/12 5:12 a.m.•7 views

OPENSUSE-SU-2020:0210-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to version 80.0.3987.87 boo1162833. Security issues fixed: - CVE-2020-6381: Integer overflow in JavaScript boo1162833. - CVE-2020-6382: Type Confusion in JavaScript boo1162833. - CVE-2019-18197: Multiple vulnerabilities in...

8.8CVSS6.9AI score0.08023EPSS
SaveExploits19References40
Rows per page
Query Builder