Lucene search
+L

5213 matches found

Cvelist
Cvelist
added 2019/12/23 12:53 a.m.32 views

CVE-2019-19926

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

8.3AI score0.06997EPSS
SaveExploits0References11
CVE
CVE
added 2019/12/23 12:53 a.m.320 views

CVE-2019-19926

CVE-2019-19926 affects SQLite 3.30.1, where multiSelect in select.c mishandles certain parsing errors. Astra Linux notes an invalid pointer dereference triggered by ORDER BY constants in window definitions, due to an incomplete fix for CVE-2019-19880. This can cause a crash (denial of service) an...

7.5CVSS8.2AI score0.06997EPSS
SaveExploits0References11Affected Software1
Debian CVE
Debian CVE
added 2019/12/23 12:53 a.m.37 views

CVE-2019-19926

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

7.5CVSS8.3AI score0.06997EPSS
SaveExploits0
CNVD
CNVD
added 2019/12/23 12:0 a.m.6 views

SQLite Code Issue Vulnerability (CNVD-2020-22809)

SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. SQLite 3.30.1 version of the select.c file of multiSelect there is a co...

7.5CVSS8.8AI score0.06997EPSS
SaveExploits0References1
Symantec
Symantec
added 2019/12/22 12:0 a.m.41 views

SQLite CVE-2019-19926 Incomplete Fix Denial of Service Vulnerability

Description SQLite is prone to a denial of service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. SQLite 3.30.1 is vulnerable; other versions may also be affected. Technologies Affected SQLite SQLite 3.30.1 Recommendations Block external access at the netwo...

1AI score0.06997EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/20 2:2 p.m.53 views

Security Bulletin: Multiple Vulnerabilities in SQLite affects IBM Watson Studio Local

Summary Multiple Vulnerabilities in SQLite affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-9936 DESCRIPTION: In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an...

9.8CVSS0.3AI score0.45426EPSS
SaveExploits2Affected Software1
RedhatCVE
RedhatCVE
added 2019/12/19 5:6 p.m.28 views

CVE-2019-19603

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash...

7.5CVSS2.5AI score0.0825EPSS
SaveExploits0References3
NVD
NVD
added 2019/12/18 6:15 a.m.28 views

CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS7.9AI score0.06937EPSS
SaveExploits0References10
OSV
OSV
added 2019/12/18 6:15 a.m.3 views

DEBIAN-CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS7.3AI score0.06937EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/18 6:15 a.m.31 views

CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS7.4AI score
SaveExploits0References10
AlpineLinux
AlpineLinux
added 2019/12/18 6:15 a.m.78 views

CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS5AI score0.06937EPSS
SaveExploits0
OSV
OSV
added 2019/12/18 6:15 a.m.4 views

UBUNTU-CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS6.9AI score0.06937EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2019/12/18 6:15 a.m.41 views

CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS6.9AI score0.06937EPSS
SaveExploits0References2
Prion
Prion
added 2019/12/18 6:15 a.m.23 views

Input validation

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

5CVSS7.8AI score0.06937EPSS
SaveExploits0References10Affected Software9
Debian CVE
Debian CVE
added 2019/12/18 5:7 a.m.46 views

CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS8AI score0.06937EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/12/18 5:7 a.m.33 views

CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

8AI score0.06937EPSS
SaveExploits0References10
CVE
CVE
added 2019/12/18 5:7 a.m.304 views

CVE-2019-19880

CVE-2019-19880 affects SQLite 3.30.1. The issue arises in exprListAppendList in window.c, where constant integer values in ORDER BY clauses of window definitions are mishandled, allowing an attacker to trigger an invalid pointer dereference. This is described in multiple connected sources (Astra ...

7.5CVSS7.8AI score0.06937EPSS
SaveExploits0References10Affected Software1
CNVD
CNVD
added 2019/12/18 12:0 a.m.5 views

SQLite Invalid Pointer Dereference Vulnerability

SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. SQLite 3.30.1 version of the window.c file of the exprListAppendList ha...

7.5CVSS9.2AI score0.06937EPSS
SaveExploits0References1
Symantec
Symantec
added 2019/12/18 12:0 a.m.39 views

SQLite CVE-2019-19880 Denial of Service Vulnerability

Description SQLite is prone to a denial of service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. SQLite 3.30.1 is vulnerable; other versions may also be affected. Technologies Affected SQLite SQLite 3.30.1 Recommendations Block external access at the netwo...

5CVSS1.1AI score0.06937EPSS
SaveExploits0References1Affected Software1
Cloud Foundry
Cloud Foundry
added 2019/12/18 12:0 a.m.138 views

USN-4205-1: SQLite vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM...

8.8CVSS8.6AI score0.08115EPSS
SaveExploits2
Rows per page
Query Builder