5552 matches found
sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query
A NULL pointer dereference flaw was found in the matchinfo auxiliary function of the SQLite FTS3 extension module. This flaw allows an attacker who can execute SQL statements to crash the application, resulting in a denial of service...
sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations
A NULL pointer dereference was found in SQLite in the way it executes select statements with column optimizations. An attacker who is able to execute SQL statements can use this flaw to crash the application...
sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c
A use-after-free vulnerability was found in the SQLite FTS3 extension module in the way it implemented the snippet function. This flaw allows an attacker who can execute SQL statements to crash the application or potentially execute arbitrary code...
sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error
selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error...
sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner."...
Moderate: Red Hat Security Advisory: sqlite security update
An update for sqlite is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
sqlite: Use-after-free in window function leading to remote code execution
An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this...
RHEL 8 : sqlite (RHSA-2020:4442)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4442 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a singl...
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-2398)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
new module: perl:5.30
An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...
Moderate: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
EulerOS 2.0 SP2 : sqlite (EulerOS-SA-2020-2398)
According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption v...
Command Execution Vulnerability in flatCore CMS Backend
flatCore CMS is a web content management system CMS based on PHP5 and SQLite3. A command executionl vulnerability exists in the backend of flatCore CMS. An attacker can exploit the vulnerability to execute arbitrary code...
The vulnerability of the FTS3 extension of the SQLite database management system allows a hacker to execute arbitrary code.
The vulnerability of the FTS3 extension of the SQLite database management system arises from a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-2197)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.2.2 : sqlite (EulerOS-SA-2020-2197)
According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the...
Chrome for Android Update
Hi, everyone! We've just released Chrome 86 86.0.4240.99 for Android: it'll become available on Google Play over the next few weeks. This release includes Security, stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let u...
Security Bulletin: IBM Security Guardium is affected by an SQLite vulnerability
Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2019-19959 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by the mishandling of certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames. By using a...
Security Bulletin: IBM Security Guardium is affected by an SQLite vulnerability
Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2019-19242 DESCRIPTION: An unspecified error with the mishandling of pExpr-y.pTab in the sqlite3ExprCodeTarget function in expr.c in SQLite has an unknown impact and attack vector. CVSS Base score: 7.3 CVS...
Security Bulletin: IBM Security Guardium is affected by an SQLite vulnerability
Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2019-19925 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by the mishandling of a NULL pathname in the zipfileUpdate function in ext/misc/zipfile.c. By sending a specially-crafted request...