CVE-2020-11010

CVE-2020-11010 affects Tortoise ORM prior to versions 0.15.23 and 0.16.6. The issue is a SQL injection vulnerability in filtering or mass-updating on char/text fields. MySQL is directly affected; SQLite and PostgreSQL are affected only when using contains, starts_with, or ends_with filters (and t...

CVE-2020-11010 SQL injection in Tortoise ORM

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

GHSA-9J2C-X8QM-QMJQ SQL injection in Tortoise ORM

Impact Various forms of SQL injection has been found, for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL was only affected when filtering with contains, startswith or endswith filters and their case-insensitive counterparts Patches Please upgrade to 0.15.2...

SQL injection in Tortoise ORM

Impact Various forms of SQL injection has been found, for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL was only affected when filtering with contains, startswith or endswith filters and their case-insensitive counterparts Patches Please upgrade to 0.15.2...

EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1512)

According to the version of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo...

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-1512)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2020-0231

Updates of 'sqlite', 'erlang' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0231

An update of 'sqlite', 'erlang' packages of Photon OS has been released...

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-1434)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the SQLite component in Google Chrome browsers, related to operations beyond the buffer in memory, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the SQLite component in Google Chrome browsers relates to operations that occur beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information and compromise its integrity and...

CVE-2020-11656

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement...

CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

Critical Photon OS Security Update - PHSA-2020-0081

Updates of 'libtasn1', 'sqlite', 'openjdk8' packages of Photon OS have been released...

EulerOS 2.0 SP3 : sqlite (EulerOS-SA-2020-1434)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a...

Critical Photon OS Security Update - PHSA-2020-3.0-0081

Updates of 'sqlite', 'libtasn1', 'openjdk8' packages of Photon OS have been released...

The vulnerability of the SQLite component in Google Chrome browsers, related to reading beyond the buffer limit, allows attackers to gain unauthorized access to information.

The vulnerability of the SQLite component in Google Chrome browsers relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information through a specially created HTML page...

The vulnerability of the sqlite3Select function in the SQLite database management system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the sqlite3Select function in the SQLite database management system is related to a selection error that uses the DISTINCT operator. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the SQLite database management system, related to memory usage after deallocation, allows a attacker to cause a service failure.

The vulnerability of the SQLite database management system is related to a window function error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the SQLite database management system, related to uncontrolled recursion, allows attackers to trigger a service failure.

The vulnerability of the SQLite database management system is related to a type determination error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the flattenSubquery() function in the SQLite database management system, related to the assignment of the null pointer, allows a hacker to trigger a denial-of-service attack.

The vulnerability of the flattenSubquery function in the SQLite database management system is related to the improper handling of certain variations of the SELECT DISTINCT operation. Exploiting this vulnerability can allow an attacker to cause service interruptions...