294 matches found
sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c
A use-after-free vulnerability was found in the SQLite FTS3 extension module in the way it implemented the snippet function. This flaw allows an attacker who can execute SQL statements to crash the application or potentially execute arbitrary code...
Type Obfuscation Vulnerability in CAJViewer
CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A type confusion vulnerability exists in CAJViewer. An attacker can exploit this vulnerability to cause a denial of service...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
...
The vulnerability of the FTS3 extension of the SQLite database management system allows a hacker to execute arbitrary code.
The vulnerability of the FTS3 extension of the SQLite database management system arises from a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58243)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: FTS component of Oracle MySQL Server 5.7.31, 8.0.21 and earlier versions. An attacker can exploit this...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58242)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: FTS component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59071)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: FTS component of Oracle MySQL Server 5.6.49, 5.7.31, 8.0.21 and earlier versions. An attacker can...
ALPINE-CVE-2020-14765
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
UBUNTU-CVE-2020-14789
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
UBUNTU-CVE-2020-14804
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...
Fetching Full-Text Alert Data with the Wallarm API
A lot of information about detected malicious requests is already available in the Wallarm console UI. However, the search functionality of the Wallarm UI does not provide full visibility into every type of potential attack or full details of a particular alert. If this level of visibility is...
Fedora: Security Advisory for lucene (FEDORA-2020-cf8ef2f333)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:1227-1 Security update for postgresql96, postgresql10 and postgresql12
This update for postgresql96, postgresql10 and postgresql12 fixes the following issues: postgresql10 was updated to 10.13 bsc1171924. https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/10/release-10-13.html postgresql10 was updated to 10.12 CVE-2020-1720, bsc1163985 -...
Couchbase Sync Gateway and Couchbase Server Denial of Service Vulnerabilities
Couchbase Sync Gateway and Couchbase Server are both products of Couchbase Inc. Couchbase Sync Gateway is a secure web gateway for data access and data synchronization over the web.Couchbase Server is a distributed open source Couchbase Server is a distributed open-source NoSQL non-relational...
CVE-2020-9041
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections...
Design/Logic Flaw
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections...
CVE-2020-9041: Improper Resource Shutdown or Release
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections...
The vulnerability of the FTS3 virtual table module in the SQLite database management system allows a hacker to execute arbitrary code.
The vulnerability of the FTS3 virtual table module in the SQLite database management system is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...