Lucene search
K

4786 matches found

Prion
Prion
added 2023/12/29 10:15 a.m.20 views

Heap overflow

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...

5.2CVSS7AI score0.00133EPSS
Exploits1References7Affected Software2
CNNVD
CNNVD
added 2023/12/29 12:0 a.m.1 views

SQLite Security Vulnerabilities

SQLite is a lightweight database that is an ACID-compliant relational database management system. A security vulnerability exists in SQLite 3.43.0 and earlier versions, which originates in the function sessionReadRecord in file ext/session/sqlite3session.c that causes a heap-based buffer overflow...

7.3CVSS9.2AI score0.00133EPSS
Exploits1References11
OSV
OSV
added 2023/12/29 12:0 a.m.1 views

UBUNTU-CVE-2023-7104

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...

7.3CVSS6.2AI score0.00133EPSS
Exploits1References5
Veracode
Veracode
added 2023/12/27 3:29 p.m.36 views

Buffer Overflow

SQLite is vulnerable to heap-based buffer overflow. The vulnerability is due to the sessionReadRecord function within ext/session/sqlite3session.c, which allows an attacker to manipulate the pIn parameter which results in a buffer overflow...

7.3CVSS6.9AI score0.00133EPSS
Exploits1References8Affected Software4
Snyk
Snyk
added 2023/12/25 9:52 p.m.2 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the sessionReadRecord function in the ext/session/sqlite3session.c file. An attacker can cause a program crash or execute arbitrary code by manipulating the input to trigger a heap-based buffer overflow...

7.3CVSS8AI score0.00133EPSS
Exploits1References2
AlpineLinux
AlpineLinux
added 2023/12/25 9:0 p.m.86 views

CVE-2023-7104

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...

7.3CVSS7.1AI score0.00133EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2023/12/25 9:0 p.m.1 views

CVE-2023-7104 SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...

5.5CVSS6.8AI score0.00133EPSS
Exploits1References7
CVE
CVE
added 2023/12/25 9:0 p.m.234 views

CVE-2023-7104

CVE-2023-7104 : SQLite3 up to 3.43.0 is vulnerable in the extension code, specifically the function sessionReadRecord in ext/session/sqlite3session.c. The issue permits a heap-based buffer overflow due to improper input validation, as described in multiple sources (including Brocade security note...

7.3CVSS6.9AI score0.00133EPSS
Exploits1References8Affected Software1
Debian CVE
Debian CVE
added 2023/12/25 9:0 p.m.54 views

CVE-2023-7104

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...

7.3CVSS6.4AI score0.00133EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2023/12/25 12:0 a.m.1 views

PT-2023-8333 · Sqlite +10 · Sqlite +10

Name of the Vulnerable Software and Affected Versions: SQLite versions up to 3.43.0 Description: A critical issue affects the sessionReadRecord function of the file ext/session/sqlite3session.c, leading to a heap-based buffer overflow. This can be exploited by a remote attacker to impact...

7.5CVSS7.6AI score0.0172EPSS
Exploits3References78
OpenVAS
OpenVAS
added 2023/12/15 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2023-3456)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.00219EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/12/14 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2023-3387)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3AI score
Exploits0References2
OpenVAS
OpenVAS
added 2023/12/14 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2023-3369)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3AI score
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/12/07 10:45 p.m.36 views

Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerability in SQLite (CVE-2018-20346)

Summary The following vulnerability in SQLite has been addressed by IBM Flex System Chassis Management Module CMM. Vulnerability Details CVEID: CVE-2018-20346 DESCRIPTION: SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow and resultant buffer overflow for FT...

8.1CVSS2.6AI score0.13522EPSS
Exploits1Affected Software1
Packet Storm
Packet Storm
added 2023/12/04 12:0 a.m.364 views

October CMS 3.4.0 About Cross Site Scripting

OctoberCMS v3.4.0 About Stored Cross-Site Scripting Vulnerability Vendor: October CMS Product web page: https://www.octobercms.com Affected version: 3.4.0 Summary: OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application framework...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2023/12/04 12:0 a.m.242 views

October CMS 3.4.0 Wiki Article Cross Site Scripting

OctoberCMS v3.4.0 Wikiarticle Stored Cross-Site Scripting Vulnerability Vendor: October CMS Product web page: https://www.octobercms.com Affected version: 3.4.0 Summary: OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application...

7.4AI score
Exploits0
Zero Science Lab
Zero Science Lab
added 2023/12/03 12:0 a.m.278 views

OctoberCMS v3.4.0 (Blog) Stored Cross-Site Scripting Vulnerabilities

Summary OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application framework. It supports MySQL, SQLite and PostgreSQL for the database back end and uses a flat file database for the front end structure. The October CMS covers a ran...

5.9AI score
Exploits0
Zero Science Lab
Zero Science Lab
added 2023/12/03 12:0 a.m.282 views

OctoberCMS v3.4.0 (Category) Stored Cross-Site Scripting Vulnerability

Summary OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application framework. It supports MySQL, SQLite and PostgreSQL for the database back end and uses a flat file database for the front end structure. The October CMS covers a ran...

5.9AI score
Exploits0
Zero Science Lab
Zero Science Lab
added 2023/12/03 12:0 a.m.283 views

OctoberCMS v3.4.0 (Wiki_article) Stored Cross-Site Scripting Vulnerability

Summary OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application framework. It supports MySQL, SQLite and PostgreSQL for the database back end and uses a flat file database for the front end structure. The October CMS covers a ran...

6AI score
Exploits0
Zero Science Lab
Zero Science Lab
added 2023/12/03 12:0 a.m.296 views

OctoberCMS v3.4.0 (About) Stored Cross-Site Scripting Vulnerability

Summary OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application framework. It supports MySQL, SQLite and PostgreSQL for the database back end and uses a flat file database for the front end structure. The October CMS covers a ran...

6AI score
Exploits0
Rows per page
Query Builder