CVE-2019-19603: Undefined Security Weakness

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash...

PT-2019-4850

Name of the Vulnerable Software and Affected Versions SQLite version 3.30.1 Description The issue is related to the flattenSubquery function in SQLite, which mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN where the right-hand side is a view. This can cause a NULL pointer...

Concrete CMS: XSS in select attribute options

To reproduce 1. Create a new select attribute. 2. Add a select attribute option with value alert'XSS' and hit Save. 3. Edit the newly created attribute again and see XSS dialog. The vulnerability lays in the typeform.php file, see...

SQLite elect.c file denial of service vulnerability

SQLite is an open source C-based embedded relational database management system . A security vulnerability exists in sqlite3Select in the select.c file in SQLite version 3.30.1. An attacker can exploit this vulnerability to cause the program to crash...

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

Sql injection

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

CVE-2019-19244

CVE-2019-19244 affects SQLite 3.30.1, where sqlite3Select in select.c can crash if a sub‑select uses both DISTINCT and window functions and there is particular ORDER BY usage. The consequence is a denial of service via crash. Connected IBM/ASTRA pages confirm the CVE and describe the same SQLite ...

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

CVE-2014-6310

Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...

Buffer overflow

Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...

CVE-2014-6310

Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...

CVE-2014-6310

CVE-2014-6310 describes a buffer overflow in CHICKEN (versions 4.9.0 and 4.9.0.1) that may allow remote attackers to execute arbitrary code via the 'select' function. The connected documents confirm the affected product and the vulnerable vector, but do not provide specific exploit details, PoCs,...

CVE-2014-6310

Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...

NetApp ONTAP Select Deploy Code Injection Vulnerability

ONTAP Select Deploy is a management utility for deploying and managing ONTAP Select clusters. A code injection vulnerability exists in ONTAP Select Deploy. An attacker could exploit the vulnerability to enable and use privileged user accounts...

CVE-2014-6310: Buffer Copy without Checking Size of Input

Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...

PT-2019-7134

Name of the Vulnerable Software and Affected Versions CHICKEN versions 4.9.0 through 4.9.0.1 Description A buffer overflow issue may allow remote attackers to execute arbitrary code via the 'select' function. Recommendations For CHICKEN versions 4.9.0 through 4.9.0.1, consider disabling the selec...

NetApp ONTAP Select Deploy Elevation of Privilege Vulnerability

ONTAP Select Deploy is a management utility for deploying and managing ONTAP Select clusters. An elevation of privilege vulnerability exists in ONTAP Select Deploy. An attacker could exploit this vulnerability to achieve elevation of privilege...