Lucene search
K

4786 matches found

RedHat Linux
RedHat Linux
added 2020/04/28 3:49 p.m.1 views

sqlite: heap out-of-bound read in function rtreenode()

SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode function when handling invalid rtree tables...

9.8CVSS7.4AI score0.31274EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/04/28 3:49 p.m.2 views

sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results...

7.5CVSS7.3AI score0.062EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/04/28 3:49 p.m.1 views

sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite error handling...

5.3CVSS7.3AI score0.06298EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/04/28 3:49 p.m.1 views

sqlite: mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames

ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by for example valgrind...

7.5CVSS7.3AI score0.0052EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/04/28 3:49 p.m.1 views

sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive...

7.5CVSS7.4AI score0.07012EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2020/04/28 12:0 a.m.51 views

RHEL 8 : sqlite (RHSA-2020:1810)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1810 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a singl...

9.8CVSS7.5AI score0.31274EPSS
Exploits0References18
Tenable Nessus
Tenable Nessus
added 2020/04/28 12:0 a.m.39 views

Photon OS 1.0: Sqlite PHSA-2020-1.0-0289

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0289. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13603...

9.8CVSS8.1AI score0.06234EPSS
Exploits1References4
Photon
Photon
added 2020/04/23 12:0 a.m.34 views

Important Photon OS Security Update - PHSA-2020-0083

Updates of 'sqlite', 'unzip', 'systemd', 'ansible', 'openjdk8', 'lz4' packages of Photon OS have been released...

6.8CVSS1.7AI score0.63564EPSS
Exploits3
Photon
Photon
added 2020/04/23 12:0 a.m.64 views

Important Photon OS Security Update - PHSA-2020-3.0-0083

Updates of 'systemd', 'sqlite', 'openjdk8', 'ansible', 'lz4', 'unzip' packages of Photon OS have been released...

7.8CVSS6.5AI score0.0026EPSS
Exploits1
Photon
Photon
added 2020/04/22 12:0 a.m.36 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0234

An update of 'sqlite' packages of Photon OS has been released...

5CVSS0.9AI score0.00951EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/04/22 12:0 a.m.27 views

Photon OS 2.0: Sqlite PHSA-2020-2.0-0231

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0231. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13590...

9.8CVSS8.1AI score0.06234EPSS
Exploits1References3
Photon
Photon
added 2020/04/22 12:0 a.m.29 views

Important Photon OS Security Update - PHSA-2020-0234

Updates of 'sqlite' packages of Photon OS have been released...

7.5CVSS1.7AI score0.00951EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/04/21 12:0 a.m.40 views

Photon OS 3.0: Sqlite PHSA-2020-3.0-0081

An update of the sqlite package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0081. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135778;...

9.8CVSS8.1AI score0.06234EPSS
Exploits1References3
NVD
NVD
added 2020/04/20 10:15 p.m.5 views

CVE-2020-11010

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

8.8CVSS7.5AI score0.00245EPSS
Exploits0References2
OSV
OSV
added 2020/04/20 10:15 p.m.12 views

CVE-2020-11010

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

8.8CVSS9.3AI score
Exploits0References2
PyPA
PyPA
added 2020/04/20 10:15 p.m.4 views

PYSEC-2020-144

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

8.8CVSS8.1AI score0.00245EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/04/20 10:15 p.m.10 views

PYSEC-2020-144

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

8.8CVSS3.2AI score0.00245EPSS
Exploits0References2
Prion
Prion
added 2020/04/20 10:15 p.m.9 views

Sql injection

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

6.5CVSS9.2AI score0.00245EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2020/04/20 9:50 p.m.72 views

CVE-2020-11010

CVE-2020-11010 affects Tortoise ORM prior to versions 0.15.23 and 0.16.6. The issue is a SQL injection vulnerability in filtering or mass-updating on char/text fields. MySQL is directly affected; SQLite and PostgreSQL are affected only when using contains, starts_with, or ends_with filters (and t...

8.8CVSS8AI score0.00245EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/04/20 9:50 p.m.11 views

CVE-2020-11010 SQL injection in Tortoise ORM

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

6.3CVSS9.2AI score0.00245EPSS
Exploits0References2
Rows per page
Query Builder