5456 matches found
CVE-2026-51291
...
EUVD-2026-51256
sqlite 3.41 is vulnerable to use after free in the json.c jsonCacheInsert function of the JSON cache management module...
CVE-2026-51291
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51293
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
EUVD-2026-51252
SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function...
CVE-2026-51294
CVE-2026-51294 affects SQLite 3.41, with a use-after-free vulnerability in the jsonArrayLengthFunc function (json.c). The available data specify the vulnerable component and the function but do not provide explicit exploit details, affected subcomponents, versions beyond 3.41, or concrete remedia...
Linux Distros Unpatched Vulnerability : CVE-2026-58041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement...
CVE-2026-51294
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
EUVD-2026-51251
SQLite 3.41 is vulnerable to use after free in the jsonExtractFunc function. Premature release of parsed JSON object memory leads to subsequent illegal access of freed pointer. Remote attackers can trigger this flaw via specially crafted SQL queries, resulting in service crash and sensitive memor...
EUVD-2026-51254
A use-after-free vulnerability exists in SQLite 3.41 when the jsonBlobAppendNode function is invoked subsequent to sqlite3DbFree being called on the aBlob member of the Parse structure...
EUVD-2026-51253
SQLite 3.41 has a use-after-free vulnerability in the shared cache lock management logic of the btree module. The program frees a BtLock structure without removing the node from the linked list. Subsequent linked list traversal accesses the released memory, which can lead to denial of service and...
CVE-2026-51290
CVE-2026-51290 entry is rejected/not used and does not represent an active vulnerability.
CVE-2026-51290
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51293
CVE-2026-51293 is a use-after-free in SQLite 3.41. The vulnerability occurs in the jsonBlobAppendNode() function when it is invoked after sqlite3DbFree() has been called on the aBlob member of the Parse structure. Documents do not provide exploit details, affected version ranges beyond 3.41, or r...
CVE-2026-51291
CVE-2026-51291 is reflected in several connected sources as a use-after-free vulnerability in sqlite 3.41. The issue is reported in the jsonCacheInsert function of the JSON cache management module. Details across sources indicate affected product/version and the underlying flaw, but explicit impa...
PT-2026-66525
A use-after-free vulnerability exists in SQLite 3.41 when the jsonBlobAppendNode function is invoked subsequent to sqlite3DbFree being called on the aBlob member of the Parse structure...
CVE-2026-51292
CVE-2026-51292 affects SQLite 3.41, describing a use-after-free in the memory buffer processing logic. The vulnerability allows remote attackers to craft input that can lead to arbitrary code execution, information leakage, or denial of service. The available documents identify the affected produ...
nodejs: Node.js node:sqlite: Unintended data modification due to stale statement iterator
A flaw was found in Node.js's node:sqlite module. This vulnerability allows a previously used database statement, which should have been reset, to be re-executed with new parameters. This could lead to unintended data modifications or integrity issues within the application...