Lucene search
+L

5216 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.11 views

The vulnerability of the zipfileUpdate() function in the SQLite database management system allows a hacker to cause a service failure.

The vulnerability of the zipfileUpdate function in the SQLite database management system is related to the improper handling of NULL paths during the update of zip archives. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS6.8AI score0.0681EPSS
SaveExploits0References15Affected Software9
Photon
Photon
added 2020/04/23 12:0 a.m.65 views

Important Photon OS Security Update - PHSA-2020-3.0-0083

Updates of 'unzip', 'openjdk8', 'systemd', 'lz4', 'sqlite', 'ansible' packages of Photon OS have been released...

4.3CVSS6.5AI score0.03899EPSS
SaveExploits0
Photon
Photon
added 2020/04/22 12:0 a.m.35 views

Important Photon OS Security Update - PHSA-2020-0234

Updates of 'sqlite' packages of Photon OS have been released...

7.5CVSS1.7AI score0.03683EPSS
SaveExploits0
Photon
Photon
added 2020/04/22 12:0 a.m.38 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0234

An update of 'sqlite' packages of Photon OS has been released...

5CVSS0.9AI score0.03683EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.7 views

The vulnerability of SQLite’s data processing mechanism in Google Chrome browsers allows attackers to gain unauthorized access to confidential data.

The vulnerability of SQLite data processing mechanism in Google Chrome browsers is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data through a created HTML page...

7.1CVSS7.2AI score0.01711EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.9 views

The vulnerability of SQLite’s data processing mechanism in Google Chrome browsers allows attackers to gain unauthorized access to confidential data.

The vulnerability of SQLite data processing mechanism in Google Chrome browsers is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data through a created HTML page...

7.1CVSS7.2AI score0.01711EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.6 views

The vulnerability of the SQLite data initialization mechanism in Google Chrome browsers allows attackers to gain unauthorized access to confidential data.

The vulnerability of the SQLite data initialization mechanism in Google Chrome browsers is related to the disclosure of information during data processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential data through a created...

7.1CVSS6.7AI score0.02037EPSS
SaveExploits0References11Affected Software6
Tenable Nessus
Tenable Nessus
added 2020/04/22 12:0 a.m.28 views

Photon OS 2.0: Sqlite PHSA-2020-2.0-0231

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0231. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13590...

9.8CVSS8.1AI score0.0761EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2020/04/21 12:0 a.m.42 views

Photon OS 3.0: Sqlite PHSA-2020-3.0-0081

An update of the sqlite package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0081. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135778;...

9.8CVSS8.1AI score0.0761EPSS
SaveExploits1References3
OSV
OSV
added 2020/04/20 10:15 p.m.20 views

CVE-2020-11010

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

8.8CVSS9.3AI score
SaveExploits0References2
NVD
NVD
added 2020/04/20 10:15 p.m.32 views

CVE-2020-11010

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

8.8CVSS7.5AI score0.01047EPSS
SaveExploits0References2
Prion
Prion
added 2020/04/20 10:15 p.m.12 views

Sql injection

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

6.5CVSS9.2AI score0.01047EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/04/20 10:15 p.m.36 views

PYSEC-2020-144

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

8.8CVSS3.2AI score0.01047EPSS
SaveExploits0References2
PyPA
PyPA
added 2020/04/20 10:15 p.m.66 views

PYSEC-2020-144

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

8.8CVSS8.1AI score0.01047EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/04/20 9:50 p.m.77 views

CVE-2020-11010

CVE-2020-11010 affects Tortoise ORM prior to versions 0.15.23 and 0.16.6. The issue is a SQL injection vulnerability in filtering or mass-updating on char/text fields. MySQL is directly affected; SQLite and PostgreSQL are affected only when using contains, starts_with, or ends_with filters (and t...

8.8CVSS8AI score0.01047EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/04/20 9:50 p.m.36 views

CVE-2020-11010 SQL injection in Tortoise ORM

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

6.3CVSS9.2AI score0.01047EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2020/04/20 9:31 p.m.123 views

SQL injection in Tortoise ORM

Impact Various forms of SQL injection has been found, for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL was only affected when filtering with contains, startswith or endswith filters and their case-insensitive counterparts Patches Please upgrade to 0.15.2...

8.8CVSS3AI score0.01047EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2020/04/20 9:31 p.m.16 views

GHSA-9J2C-X8QM-QMJQ SQL injection in Tortoise ORM

Impact Various forms of SQL injection has been found, for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL was only affected when filtering with contains, startswith or endswith filters and their case-insensitive counterparts Patches Please upgrade to 0.15.2...

6.3CVSS9AI score0.01047EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2020/04/20 12:0 a.m.32 views

EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1512)

According to the version of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo...

7.5CVSS7.3AI score0.0434EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/04/20 12:0 a.m.66 views

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-1512)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.0434EPSS
SaveExploits1References2
Rows per page
Query Builder