sqlite3-ruby: Possible SQL query truncation when a string is 4 GiB or larger

Summary sqlite3-ruby cast Ruby string lengths long to int before passing them to SQLite. On 64-bit platforms, a string of 4 GiB 2^32 bytes or larger had its length wrap, so SQLite saw only the first length mod 2^32 bytes. An attacker who controls the length of a SQL string could truncate the quer...

GHSA-4FQR-96Q8-XRFX sqlite3-ruby: Possible SQL query truncation when a string is 4 GiB or larger

Summary sqlite3-ruby cast Ruby string lengths long to int before passing them to SQLite. On 64-bit platforms, a string of 4 GiB 2^32 bytes or larger had its length wrap, so SQLite saw only the first length mod 2^32 bytes. An attacker who controls the length of a SQL string could truncate the quer...

CVE-2026-128084

The sqlite3-ruby library is vulnerable to SQL query truncation on 64-bit platforms because it casts Ruby string lengths (long) to integers before passing them to SQLite. Strings of 4 GiB (2^32 bytes) or larger cause the length to wrap, leading SQLite to process only a prefix. This can result in d...

EUVD-2026-125713

sqlite3 provides Ruby bindings for the SQLite3 embedded database. Prior to 2.10.2, sqlite3-ruby casts Ruby string lengths to int before passing SQL through Databaseprepare, bound String or Blob values through Statementbindparam, and String or Blob results from Ruby-defined SQL functions and...

CVE-2026-128084 sqlite3-ruby: SQL Query Truncation

sqlite3 provides Ruby bindings for the SQLite3 embedded database. Prior to 2.10.2, sqlite3-ruby casts Ruby string lengths to int before passing SQL through Databaseprepare, bound String or Blob values through Statementbindparam, and String or Blob results from Ruby-defined SQL functions and...

ReadyScript SQL Injection

The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2026-59827

CVE-2026-59827 — Unsafe Deserialization of H2 Query Results in Metabase GHSA-w95f-x9v9-wv36 | CVSS 9.9 Critical | CWE-502: Deserialization of Untrusted Data Overview CVE-2026-59827 is a critical remote code execution vulnerability in Metabase, the popular open-source business intelligence and dat...

Juniper Networks ipfd daemon RCE

The ipfd vulnerability in Juniper Networks’ Junos OS and SRX series routers affects Junos OS and Junos OS Evolved operating systems. It stems from improper handling of SQL query structures. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code with root privileges...

CVE-2026-125380 DataRoom through 3.0.0 Incorrect Authorization via /dataRoom/dataset/run/test

DataRoom through 3.0.0 contains an incorrect authorization vulnerability in DatasetController.runTest that allows visitor-role users to execute dataset definitions supplied in the request body. Attackers can specify an arbitrary dataSourceCode and raw SELECT SQL to query any configured relational...

PT-2026-141203

DataRoom through 3.0.0 contains an incorrect authorization vulnerability in DatasetController.runTest that allows visitor-role users to execute dataset definitions supplied in the request body. Attackers can specify an arbitrary dataSourceCode and raw SELECT SQL to query any configured relational...

CVE-2026-119371

A flaw was found in SQLite. This vulnerability allows an attacker to cause a Denial of Service DoS through stack exhaustion. By providing a specially crafted SQL query or an untrusted database file with deeply nested Common Table Expressions CTEs, an attacker can bypass expression nesting limits...

CVE-2026-107352

A flaw was found in Amazon Athena. Missing authorization checks during request handling can lead to information disclosure across different accounts. An authenticated user could exploit this flaw to access query metadata belonging to other accounts, exposing account identifiers and Structured Que...

CVE-2026-120065 psqlODBC does not escape a server-supplied column name in its updatable-cursor queries

For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that column to identify rows. It places the column's name, as reported by the server, between double quotes in its keyset queries and in the WHERE clause of its positioned SELECT, UPDATE, and...

CVE-2026-119591

A flaw was found in SQLite. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the host application. By supplying a specially crafted database file or SQL query that performs a count operation over a large multi-row VALUES clause, an attacker can trigger excessive...

YesWiki debug information leakage vulnerability

Versions 4.6.0 through 4.7.0 of YesWiki contain a debug information leakage vulnerability. This vulnerability arises because unauthenticated attackers can add the “showreq” parameter to view the resulting SQL query, leading to information disclosure. This may result in exposure of table names, JS...

CVE-2026-116820 YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter

YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL...

CVE-2026-116820

Versions of YesWiki from 4.6.0 before 4.7.0 are vulnerable to an information disclosure vulnerability. An unauthenticated attacker can append the showreq parameter to public Bazar listing API requests to view assembled SQL queries. This disclosure provides sensitive data, including table names , ...

CVE-2026-116820 YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter

YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL...

CVE-2026-116820 YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter

YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL...

Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Multiple vulnerabilities were found in IBM Db2 LUW that affect Platform System Manager PSM and Db2 pattern Type pType shipped with IBM Cloud Pak System. Those vulnerabilities were addressed in IBM Cloud Pak System CPS 2.3.6.2. Vulnerability Details CVEID:CVE-2025-36122 DESCRIPTION: IBM Db...