Lucene search
K

4786 matches found

ThreatPost
ThreatPost
added 2019/08/09 3:47 p.m.117 views

DEF CON 2019: Researchers Demo Hacking Google Home for RCE

LAS VEGAS – The Tencent Blade Team of researchers demonstrated several ways they have developed to hack and run remote code on Google Home smart speakers. The hacks center around what is known as a Magellan vulnerability, which can be used to exploit the massively popular SQLite database engine...

6.8CVSS8.7AI score0.13522EPSS
Exploits2References3
OpenVAS
OpenVAS
added 2019/08/09 12:0 a.m.49 views

Fedora Update for sqlite FEDORA-2019-3377813d18

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.1AI score0.31274EPSS
Exploits0References2
Fedora
Fedora
added 2019/08/08 1:53 a.m.50 views

[SECURITY] Fedora 29 Update: sqlite-3.26.0-4.fc29

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

9.8CVSS1.6AI score0.31274EPSS
Exploits1
NVD
NVD
added 2019/08/07 1:15 p.m.13 views

CVE-2016-10804

The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...

8.7CVSS8.1AI score0.00334EPSS
Exploits0References2
OSV
OSV
added 2019/08/07 1:15 p.m.1 views

CVE-2016-10804

The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...

8.1CVSS5.9AI score0.00334EPSS
Exploits0References2
Prion
Prion
added 2019/08/07 1:15 p.m.14 views

Design/Logic Flaw

The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...

8.7CVSS7.2AI score0.00334EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/08/07 12:26 p.m.37 views

CVE-2016-10804

The CVE-2016-10804 issue affects cPanel prior to 57.9999.54, where the SQLite journal feature can cause arbitrary file overwrites during Horde Restore (SEC-58). Root cause: misuse of the SQLite journal leads to write operations to arbitrary files. Impact (per sources): High, with potential confid...

8.7CVSS8AI score0.00334EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/08/07 12:26 p.m.13 views

CVE-2016-10804

The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...

8.1AI score0.00334EPSS
Exploits0References1
Check Point Advisories
Check Point Advisories
added 2019/08/07 12:0 a.m.2 views

SQLite fts3_tokenizer Untrusted Pointer Remote Code Execution (CVE-2019-8602; CVE-2015-7036)

A remote code execution vulnerability exists in SQlite fts3tokenizer. Successful exploitation could result in execution of arbitrary code on the affected system...

7.5CVSS8AI score0.041EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2019/08/05 7:7 p.m.147 views

Security Bulletin: Public disclosed vulnerability from SQLite CVE-2019-8457

Summary IBM Tivoli Composite Application Manager ITCAM for Transactions - Transaction Tracking has addressed the following SQLite vulnerability: SQLite could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow when the FTS3 extension is enabled. By using...

9.8CVSS1.2AI score0.31274EPSS
Exploits0Affected Software1
OSV
OSV
added 2019/08/02 5:15 p.m.0 views

CVE-2017-18449

cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...

5.5CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2019/08/02 4:15 p.m.1 views

CVE-2017-18432

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password SEC-234...

7.8CVSS5.8AI score0.00065EPSS
Exploits0References1
NVD
NVD
added 2019/08/02 4:15 p.m.9 views

CVE-2017-18432

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password SEC-234...

7.8CVSS7.6AI score0.00065EPSS
Exploits0References1
Prion
Prion
added 2019/08/02 4:15 p.m.12 views

Design/Logic Flaw

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password SEC-234...

2.1CVSS7.5AI score0.00065EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/08/02 3:57 p.m.50 views

CVE-2017-18432

CVE-2017-18432 affects cPanel prior to 64.0.21, specifically the Horde MySQL to SQLite conversion process. The underlying issue is a leakage of a database password (SEC-234) during the conversion, enabling potential disclosure of database credentials. This vulnerability has a high impact on confi...

7.8CVSS7.5AI score0.00065EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/02 3:57 p.m.14 views

CVE-2017-18432

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password SEC-234...

7.6AI score0.00065EPSS
Exploits0References1
NVD
NVD
added 2019/08/02 2:15 p.m.12 views

CVE-2017-18416

cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...

5.5CVSS5.6AI score0.00045EPSS
Exploits0References2
OSV
OSV
added 2019/08/02 2:15 p.m.1 views

CVE-2017-18416

cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...

5.5CVSS5.9AI score0.00045EPSS
Exploits0References2
Prion
Prion
added 2019/08/02 2:15 p.m.16 views

Design/Logic Flaw

cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...

3.6CVSS5.6AI score0.00045EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/08/02 1:53 p.m.19 views

CVE-2017-18416

cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...

5.7AI score0.00045EPSS
Exploits0References1
Rows per page
Query Builder