Lucene search
+L

11755 matches found

NVD
NVD
added 2019/12/23 1:15 a.m.28 views

CVE-2019-19926

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

7.5CVSS8.2AI score0.06997EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
added 2019/12/23 1:15 a.m.42 views

CVE-2019-19926

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

7.5CVSS6.9AI score0.06997EPSS
SaveExploits0References3
Prion
Prion
added 2019/12/23 1:15 a.m.32 views

Code injection

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

5CVSS8AI score0.06997EPSS
SaveExploits0References11Affected Software9
OSV
OSV
added 2019/12/23 1:15 a.m.8 views

UBUNTU-CVE-2019-19926

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

7.5CVSS6.9AI score0.06997EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2019/12/23 12:53 a.m.33 views

CVE-2019-19926

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

8.3AI score0.06997EPSS
SaveExploits0References11
Debian CVE
Debian CVE
added 2019/12/23 12:53 a.m.38 views

CVE-2019-19926

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

7.5CVSS8.3AI score0.06997EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/12/23 12:00 a.m.9 views

The vulnerability of the WiFiRanger router’s microprogramming software, related to key management errors, allows a hacker to obtain access to the SSH key and gain root account access to the system.

The vulnerability of the WiFiRanger router’s microprogramming software is related to key management errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain access to the SSH key and gain control of the system with the root account...

8.8CVSS7.6AI score0.01853EPSS
SaveExploits3References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:00 a.m.9 views

The vulnerability of the application management tools and Flatpak environments, related to errors in processing file descriptors, allows a hacker to modify any executable files on the host side.

The vulnerability of the application management tool and the Flatpak environment is related to errors in processing file descriptors. Exploiting this vulnerability allows an attacker to modify arbitrary executable files on the host by executing the “applyextra” script...

7.7CVSS7.3AI score0.00466EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:00 a.m.10 views

The vulnerability of the virtualjdbc component in the SAP Commerce Cloud e-commerce platform allows a hacker to execute arbitrary code.

The vulnerability of the virtualjdbc component in the SAP Commerce Cloud platform is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.2AI score0.07079EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:00 a.m.9 views

The vulnerability of the Mediaconversion component of the SAP Commerce Cloud platform allows a hacker to gain full control over the application.

The vulnerability of the Mediaconversion component of the SAP Commerce Cloud platform is related to errors in code generation. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

9CVSS7.7AI score0.01482EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2019/12/19 12:00 a.m.4 views

GitLab Information Disclosure Vulnerability (CNVD-2020-12723)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

7.5CVSS6.1AI score0.01852EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/12/19 12:00 a.m.6 views

Gitlab Information Disclosure Vulnerability (CNVD-2020-12718)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in Gitlab...

5.3CVSS6.1AI score0.01392EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/12/18 12:00 a.m.12 views

ELOG Information Disclosure Vulnerability

ELOG is a web application written in C for creating personal and general purpose logs. An information disclosure vulnerability exists in ELOG 3.1.4-57bea22 and prior versions. The vulnerability stems from errors such as configuration during operation of a networked system or product. An...

7.5CVSS6.2AI score0.45698EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/12/18 12:00 a.m.10 views

Contao Information Disclosure Vulnerability

Contao is an open source content management system CMS developed using PHP. The system supports search engine , rights management and CSS framework . An information disclosure vulnerability exists in Contao versions 4.0 to 4.8.5. The vulnerability arises from errors in configuration and other...

5.3CVSS6.2AI score0.0088EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.15 views

The vulnerability of Microsoft Windows Defender operating system allows attackers to trigger false alerts and incorrect Windows Defender service responses.

The vulnerability of Microsoft Windows Defender operating system is related to security configuration errors. Exploiting this vulnerability can allow attackers to trigger false alerts and incorrect responses by Windows Defender services...

3.3CVSS6.1AI score0.00803EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.12 views

The vulnerability of the FortiOS operating system, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FortiOS operating system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information, while pretending to be an LDAP server...

3.1CVSS7.5AI score0.18422EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.10 views

The vulnerability of the RDP protocol implementation in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the RDP protocol implementation in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created application...

6.8CVSS7.1AI score0.07736EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.10 views

The vulnerability of Microsoft Word, Microsoft Office products, and Office 365 allows a perpetrator to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, Office 365, and the Microsoft Word text editor are related to errors in memory object handling. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code remotely, using a specially crafted web page or file...

10CVSS7AI score0.04643EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.12 views

The vulnerability of Infineon’s RSA Library, related to errors in generating prime numbers in the RSA algorithm, allows a perpetrator to disclose the secret part of the key.

The vulnerability of Infineon’s RSA Library is related to errors in generating prime numbers using the RSA algorithm. Exploiting this vulnerability could allow a malicious actor to disclose the secret part of the key...

5.9CVSS6.8AI score0.09825EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.12 views

The vulnerability of the wan.htm component in D-Link DIR-600M N 150 Wi-Fi routers allows a intruder to gain unauthorized access to protected information and alter the configuration settings.

The vulnerability of the wan.htm component in D-Link DIR-600M N 150 Wi-Fi routers is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and modify configuration settings...

10CVSS7.8AI score0.67091EPSS
SaveExploits2References7Affected Software1
Rows per page
Query Builder