Sql injection

The fts3tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a SQL command that triggers an API call with a crafted pointer value in the second argument...

CVE-2015-7036

The fts3tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a SQL command that triggers an API call with a crafted pointer value in the second argument...

CVE-2015-7036

CVE-2015-7036: In SQLite, the fts3_tokenizer function is the root cause, with a crafted SQL command triggering an API call using a crafted pointer value, enabling remote code execution or a crash. Affected: Apple iOS before 8.4 and macOS/OS X before 10.10.4. The connected documents provide a conc...

SQLite fts3_tokenizer remote code execution vulnerability

SQLite is an embedded database. SQLite suffers from a security vulnerability in the handling of the fts3tokenizer function, which can be exploited by a remote attacker to construct special structured pointers that can be used to execute arbitrary code in the context of the current process...

CVE-2015-7036: Improper Input Validation

The fts3tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a SQL command that triggers an API call with a crafted pointer value in the second argument...

SQLite fts3_tokenizer Untrusted Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SQLite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Multiple SQL Injection Vulnerabilities in Zend Framework MsSql and SQLite

Zend Framework is a set of open source PHP5 development framework , it is mainly used to develop Web programs and services . Multiple SQL injection vulnerabilities exist in Zend Framework MsSql and SQLite, allowing remote attackers to exploit the vulnerabilities to submit specially crafted SQL...

CVE-2007-1887

Buffer overflow in the sqlitedecodebinary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter, as demonstrated by calling the sqliteudfdecodebinary function with a...

CVE-2007-1888

Buffer overflow in the sqlitedecodebinary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter. NOTE: some PHP installations use a bundled version of sqlite...

Mac OS X < 10.11 Multiple Vulnerabilities

Binary data 8982.prm...

Apple iOS < 9.0 Multiple Vulnerabilities

Binary data 8979.prm...

Mac OS X < 10.10.4 Multiple Vulnerabilities

Binary data 8801.prm...

SQLite Elevation of Privilege Vulnerability

SQLite is an open source C-based embedded relational database management system developed by American software developer D. Richard Hipp. The system is characterized by independence, isolation, cross-platform and so on. An elevation of privilege vulnerability exists in versions prior to SQLite...

Debian DSA-3369-1 : zendframework - security update

Multiple vulnerabilities were discovered in Zend Framework, a PHP framework : - CVE-2015-5723 It was discovered that due to incorrect permissions masks when creating directories, local attackers could potentially execute arbitrary code or escalate privileges. - ZF2015-08 no CVE assigned Chris...

CVE-2015-6607

SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586...

CVE-2015-6607

SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586...

Design/Logic Flaw

SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586...

CVE-2015-6607

SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586...

CVE-2015-6607

CVE-2015-6607 affects SQLite prior to 3.8.9 as used in Android up to 5.1.1; root cause internal bug 20099586 allows privilege gain via a crafted app. Mitigation noted in Apple advisories: iTunes updates addressed this by upgrading SQLite to 3.15.2; overall remediation is to move SQLite to a fixed...

CVE-2015-6607: Undefined Security Weakness

SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586...