Lucene search
K

417 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/13 12:0 a.m.3 views

The vulnerability of the SQLite database management system, related to memory usage after deallocation, allows a attacker to cause a service failure.

The vulnerability of the SQLite database management system is related to a window function error. Exploiting this vulnerability can allow an attacker to cause a service failure...

9.3CVSS7.4AI score0.06683EPSS
Exploits1References9Affected Software4
OSV
OSV
added 2020/04/09 3:15 a.m.6 views

CVE-2020-11656

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement...

9.8CVSS9.4AI score
Exploits0References11
CNVD
CNVD
added 2020/04/09 12:0 a.m.1 views

SQLite Resource Management Error Vulnerability

SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. A resource management error vulnerability exists in the ALTER TABLE...

9.8CVSS8.3AI score0.07407EPSS
Exploits0
CNVD
CNVD
added 2020/04/09 12:0 a.m.2 views

SQLite Input Validation Error Vulnerability (CNVD-2020-22991)

SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. A security vulnerability exists in SQLite 3.31.1 and earlier versions,...

7.5CVSS8.2AI score0.05053EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2020/04/09 12:0 a.m.8 views

PT-2020-2204 · Sqlite +3 · Sqlite +3

Name of the Vulnerable Software and Affected Versions: SQLite versions 3.31.1 and earlier Description: The issue is related to a use-after-free in the ALTER TABLE implementation, which can be demonstrated by an ORDER BY clause belonging to a compound SELECT statement. This could potentially allow...

10CVSS7AI score0.87966EPSS
Exploits27References507
IBM Security Bulletins
IBM Security Bulletins
added 2020/03/03 2:28 p.m.56 views

Security Bulletin: Addressing the Sqlite Vulnerability CVE-2019-16168, CVE-2019-19242 and CVE-2019-19244

Summary IBM Tivoli Composite Application Manager ITCAM for Transactions - Transaction Tracking has addressed the following SQLite vulnerability: Vulnerability Details CVEID: CVE-2019-16168 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by missing validation of a sqlitestat1 sz...

7.5CVSS1.8AI score0.04408EPSS
Exploits0Affected Software1
OSV
OSV
added 2020/02/21 10:15 p.m.5 views

CVE-2020-9327

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations...

7.5CVSS8.4AI score
Exploits0References11
OSV
OSV
added 2020/02/11 3:15 p.m.5 views

CVE-2020-6405

Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS7.5AI score
Exploits0References8
CNVD
CNVD
added 2019/12/25 12:0 a.m.2 views

SQLite Code Issue Vulnerability (CNVD-2020-22686)

SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. A security vulnerability exists in zipfileUpdate in the...

7.5CVSS8.7AI score0.0681EPSS
Exploits0References1
OSV
OSV
added 2019/12/24 5:15 p.m.2 views

UBUNTU-CVE-2019-19925

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive...

7.5CVSS6.9AI score0.0681EPSS
Exploits0References3
CNVD
CNVD
added 2019/12/24 12:0 a.m.2 views

Unspecified Vulnerability in SQLite (CNVD-2020-03730)

SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. SQLite version 3.30.1 there is a security vulnerability , the...

5.3CVSS8.8AI score0.07856EPSS
Exploits0References1
OSV
OSV
added 2019/12/23 1:15 a.m.1 views

DEBIAN-CVE-2019-19926

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

7.5CVSS8.7AI score0.06997EPSS
Exploits0References1
OSV
OSV
added 2019/12/10 10:15 p.m.7 views

CVE-2019-13753

Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS7.8AI score
Exploits0References12
OSV
OSV
added 2019/12/10 10:15 p.m.11 views

CVE-2019-13751

Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS7.8AI score
Exploits0References12
OSV
OSV
added 2019/12/10 10:15 p.m.6 views

CVE-2019-13752

Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS7.8AI score
Exploits0References12
OSV
OSV
added 2019/12/10 10:15 p.m.4 views

CVE-2019-13750

Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page...

6.5CVSS7.9AI score
Exploits0References12
OSV
OSV
added 2019/12/10 10:15 p.m.1 views

DEBIAN-CVE-2019-13752

Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS7.1AI score0.01711EPSS
Exploits0References1
OSV
OSV
added 2019/12/10 10:15 p.m.4 views

CVE-2019-13734

Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score
Exploits0References19
CNVD
CNVD
added 2019/12/10 12:0 a.m.3 views

SQLite code issue vulnerability (CNVD-2020-09632)

SQLite is a self-contained, serverless, zero-configuration, transactional SQL database engine. A code issue vulnerability exists in the pragma.c file in SQLite 3.30.1 and earlier versions. No detailed vulnerability details are provided at this time...

9.8CVSS8.9AI score0.05376EPSS
Exploits0References1
Prion
Prion
added 2019/12/09 4:15 p.m.19 views

Design/Logic Flaw

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements...

2.1CVSS6.6AI score0.00566EPSS
Exploits0References6Affected Software4
Rows per page
Query Builder