Lucene search
K

4776 matches found

CNVD
CNVD
added 2015/04/27 12:0 a.m.2 views

SQLite Denial of Service Vulnerability (CNVD-2015-02750)

SQLite is an open source C-based embedded relational database management system developed by American software developer D. Richard Hipp. The system is characterized by independence, isolation, cross-platform and so on. A security vulnerability exists in SQLite versions prior to 3.8.9, which stem...

7.5CVSS6.6AI score0.0794EPSS
Exploits0References1
CNVD
CNVD
added 2015/04/27 12:0 a.m.1 views

SQLite Denial of Service Vulnerability (CNVD-2015-02748)

SQLite is an open source C-based embedded relational database management system developed by American software developer D. Richard Hipp. The system is characterized by independence, isolation, cross-platform and so on. A security vulnerability exists in the 'sqlite3VXPrintf' function in the...

7.5CVSS7.1AI score0.07717EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2015/04/27 12:0 a.m.11 views

Fedora Update for sqlite FEDORA-2015-6349

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
CNVD
CNVD
added 2015/04/27 12:0 a.m.2 views

SQLite Denial of Service Vulnerability (CNVD-2015-02749)

SQLite is an open source C-based embedded relational database management system developed by American software developer D. Richard Hipp. The system is characterized by independence, isolation, cross-platform and so on. A security vulnerability exists in the 'sqlite3VdbeExec' function in the vdbe...

7.5CVSS6.7AI score0.0794EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/04/27 12:0 a.m.17 views

Fedora 20 : spatialite-tools-4.1.1-12.fc20 / sqlite-3.8.9-1.fc20 (2015-6349)

Update of sqlite to latest upstream version, with spatialite-tools rebuild. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

5.4AI score
Exploits0References5
Fedora
Fedora
added 2015/04/26 12:56 p.m.9 views

[SECURITY] Fedora 20 Update: sqlite-3.8.9-1.fc20

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

1.6AI score
Exploits0
NVD
NVD
added 2015/04/24 5:59 p.m.26 views

CVE-2015-3416

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service integer overflow and stack-based buffer overflow or possibly have unspecifie...

7.5CVSS7.9AI score0.07717EPSS
Exploits0References16
OSV
OSV
added 2015/04/24 5:59 p.m.1 views

DEBIAN-CVE-2015-3416

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service integer overflow and stack-based buffer overflow or possibly have unspecifie...

7.5CVSS7.7AI score0.07717EPSS
Exploits0References1
OSV
OSV
added 2015/04/24 5:59 p.m.22 views

CVE-2015-3416

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service integer overflow and stack-based buffer overflow or possibly have unspecifie...

8.2AI score
Exploits0References20
NVD
NVD
added 2015/04/24 5:59 p.m.29 views

CVE-2015-3415

The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service invalid free operation or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by...

7.5CVSS7.8AI score0.0794EPSS
Exploits0References15
OSV
OSV
added 2015/04/24 5:59 p.m.1 views

DEBIAN-CVE-2015-3415

The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service invalid free operation or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by...

7.5CVSS5.7AI score0.0794EPSS
Exploits0References1
OSV
OSV
added 2015/04/24 5:59 p.m.20 views

CVE-2015-3415

The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service invalid free operation or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by...

8.9AI score
Exploits0References19
Prion
Prion
added 2015/04/24 5:59 p.m.35 views

Code injection

The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service invalid free operation or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by...

7.5CVSS7.5AI score0.0794EPSS
Exploits0References15Affected Software6
OSV
OSV
added 2015/04/24 5:59 p.m.1 views

DEBIAN-CVE-2015-3414

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

7.5CVSS7.3AI score0.0794EPSS
Exploits0References1
Prion
Prion
added 2015/04/24 5:59 p.m.25 views

Integer overflow

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service integer overflow and stack-based buffer overflow or possibly have unspecifie...

7.5CVSS8AI score0.07717EPSS
Exploits0References16Affected Software6
NVD
NVD
added 2015/04/24 5:59 p.m.33 views

CVE-2015-3414

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

7.5CVSS7.9AI score0.0794EPSS
Exploits0References15
OSV
OSV
added 2015/04/24 5:59 p.m.15 views

CVE-2015-3414

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

8.9AI score
Exploits0References19
Prion
Prion
added 2015/04/24 5:59 p.m.29 views

Design/Logic Flaw

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

7.5CVSS7.6AI score0.0794EPSS
Exploits0References15Affected Software6
Cvelist
Cvelist
added 2015/04/24 5:0 p.m.36 views

CVE-2015-3416

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service integer overflow and stack-based buffer overflow or possibly have unspecifie...

8.2AI score0.07717EPSS
Exploits0References16
Cvelist
Cvelist
added 2015/04/24 5:0 p.m.36 views

CVE-2015-3414

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

8.8AI score0.0794EPSS
Exploits0References15
Rows per page
Query Builder