Lucene search
+L

824 matches found

CVE
CVE
•added 2023/04/11 12:00 a.m.•170 views

CVE-2020-24736

CVE-2020-24736 describes a SQLite3 buffer overflow that can allow a local attacker to cause a denial of service. The vulnerability is documented for SQLite 3.27.1 and earlier. Connected advisories from MiracleLinux (AXSA-2023-6185:03), Alibaba Cloud Linux 3 (ALINUX3-SA-2023:0072), TencentOS Serve...

5.5CVSS5.2AI score0.00323EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/04/11 12:00 a.m.•42 views

CVE-2020-24736

Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script...

5.3AI score0.00323EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/11 12:00 a.m.•11 views

PT-2023-11730 · Sqlite3 +4 · Sqlite3 +4

Name of the Vulnerable Software and Affected Versions: SQLite3 versions 3.27.1 and earlier Description: A Buffer Overflow issue allows a local attacker to cause a denial of service via a crafted script. This issue can be exploited to disrupt service. Recommendations: For SQLite3 versions 3.27.1 a...

5.5CVSS6.4AI score0.00323EPSS
SaveExploits1References22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•7 views

CVE-2020-24736: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script...

5.5CVSS5.7AI score0.00323EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2023/04/11 12:00 a.m.•31 views

CVE-2020-24736

Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script...

5.5CVSS5.8AI score0.00323EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2023/03/28 12:00 a.m.•41 views

Mageia: Security Advisory (MGASA-2023-0094)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS7.4AI score0.00446EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2023/03/20 12:00 a.m.•29 views

Debian: Security Advisory (DSA-5373-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.02356EPSS
SaveExploits1References4
Kitploit
Kitploit
•added 2023/03/19 11:30 a.m.•133 views

FindUncommonShares - A Python Equivalent Of PowerView's Invoke-ShareFinder.ps1 Allowing To Quickly Find Uncommon Shares In Vast Windows Domains

The script FindUncommonShares.py is a Python equivalent of PowerView's Invoke-ShareFinder.ps1 allowing to quickly find uncommon shares in vast Windows Active Directory Domains. Features Only requires a low privileges domain user account. Automatically gets the list of all computers from the domai...

7.5AI score
SaveExploits0References6
Mageia
Mageia
•added 2023/03/18 10:16 p.m.•86 views

Updated sqlite3 packages fix security vulnerability

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE. CVE-2022-46908...

7.3CVSS2.9AI score0.00446EPSS
SaveExploits1References3
osv_mgasa
osv_mgasa
•added 2023/03/18 10:16 p.m.•31 views

MGASA-2023-0094 Updated sqlite3 packages fix security vulnerability

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE. CVE-2022-46908...

7.3CVSS7.2AI score0.00446EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2023/03/16 9:15 p.m.•12 views

DEBIAN-CVE-2022-43441

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability...

9.8CVSS8.3AI score0.02356EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/16 9:15 p.m.•37 views

CVE-2022-43441

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability...

9.8CVSS9.1AI score0.02356EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2023/03/16 9:15 p.m.•22 views

UBUNTU-CVE-2022-43441

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability...

9.8CVSS7.8AI score0.02356EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2023/03/16 8:14 p.m.•165 views

CVE-2022-43441

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability...

9.8CVSS8.9AI score0.02356EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2023/03/16 8:14 p.m.•4 views

7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +265 more potentially affected by CVE-2022-43441 via sqlite3 (>=5.0.0, <=5.1.4)

sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =0.0.15, =0.0.15, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =6.1.4, =6.1.4, =7.0.1, =6.1.4, =0.1.3-alpha.0, =0.3.0 and more Source cves: CVE-2022-43441 Source advisory: MEND:CVE-2022-43441...

9.8CVSS0.02356EPSS
SaveExploits1
osv_cve
osv_cve
•added 2023/03/16 8:14 p.m.•50 views

CVE-2022-43441

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability...

8.1CVSS9.9AI score0.02356EPSS
SaveExploits1References5
CVE
CVE
•added 2023/03/16 8:14 p.m.•160 views

CVE-2022-43441

CVE-2022-43441 affects Ghost Foundation node-sqlite3 5.1.1, with a code execution vulnerability in the Statement Bindings functionality. A specially crafted Javascript input can lead to arbitrary code execution. Public details in the provided documents confirm the vulnerable component and impact ...

9.8CVSS9.5AI score0.02356EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/16 8:14 p.m.•26 views

CVE-2022-43441

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability...

8.1CVSS9.7AI score0.02356EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/03/16 8:14 p.m.•69 views

CVE-2022-43441

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability...

8.1CVSS9.9AI score0.02356EPSS
SaveExploits1References2
Mend
Mend
•added 2023/03/16 8:14 p.m.•10 views

CVE-2022-43441

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability...

9.8CVSS0.02356EPSS
SaveExploits1References8
Rows per page
Query Builder