CVE-2015-6607

CVE-2015-6607 affects SQLite prior to 3.8.9 as used in Android up to 5.1.1; root cause internal bug 20099586 allows privilege gain via a crafted app. Mitigation noted in Apple advisories: iTunes updates addressed this by upgrading SQLite to 3.15.2; overall remediation is to move SQLite to a fixed...

Oracle: Security Advisory (ELSA-2015-1634)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-3369-1 zendframework - security update

Bulletin has no description...

Oracle: Security Advisory (ELSA-2015-1635)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Patches Stagefright 2.0 in Android OTA Nexus Update

Google today patched the latest round of Stagefright vulnerabilities in Android, pushing them out as part of its latest over-the-air update to Nexus devices. Stagefright 2.0, as it’s come to be known, affected the Stagefright media playback engine in Android and one billion devices dating back to...

Gentoo Security Advisory GLSA 201507-05

Gentoo Linux Local Security Checks GLSA 201507-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Android sqlite load_extension vulnerability analysis-vulnerability warning-the black bar safety net

SQLite from 3. 3. 6 version http://www.sqlite.org/cgi/src/artifact/71405a8f9fedc0c2 start provides support for expansion of capacity, by sqliteloadextension API or loadextensionSQL statement, developers can not change the SQLite source code of the case, through the dynamic loading of libraries,...

Multiple Unspecified Vulnerabilities in Apple iOS SQLite

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. There are multiple security vulnerabilities in Apple iOS SQLite, no detailed vulnerability details are available at this time...

CVE-2015-5895

Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors...

CVE-2015-5895

Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors...

CVE-2015-5895

CVE-2015-5895 affects SQLite versions before 3.8.10.2 used in Apple iOS up to iOS 9; the advisory notes unknown impact/attack vectors. The F5 advisory confirms the CVE and references remediation via updating SQLite to 3.8.10.2; separate entries corroborate the affected version. If deploying affec...

Potential SQL injection vector using null byte for PDO (MsSql, SQLite)

More info at https://framework.zend.com/security/advisory/ZF2015-08...

Amazon Linux: Security Advisory (ALAS-2015-591)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2698-1 SQLite Vulnerabilities | Cloud Foundry

USN-2698-1 SQLite Vulnerabilities Medium Vendor SQLite Versions Affected Ubuntu 14.04 Description It was discovered that SQLite incorrectly handled skip-scan optimization. An attacker could use this issue to cause applications using SQLite to crash, resulting in a denial of service, or possibly...

Amazon Linux AMI : sqlite (ALAS-2015-591)

A flaw was found in the way SQLite handled dequoting of collation-sequence names. A local attacker could submit a specially crafted COLLATE statement that would crash the SQLite process, or have other unspecified impacts. CVE-2015-3414 It was found that SQLite's sqlite3VdbeExec function did not...

Medium: sqlite

Issue Overview: A flaw was found in the way SQLite handled dequoting of collation-sequence names. A local attacker could submit a specially crafted COLLATE statement that would crash the SQLite process, or have other unspecified impacts. CVE-2015-3414 It was found that SQLite's sqlite3VdbeExec...

Encryption, Lock Mechanism Vulnerabilities Plague Lock App AppLock

Multiple weaknesses exist in AppLock, a popular lock application for Android devices that boasts more than 100 million users. A researcher is claiming that the app, which is supposed to securely store photos, videos and other apps, doesn’t really use encryption to do so, it simply hides the files...

OracleVM 3.3 : sqlite (OVMSA-2015-0115)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add patch for compiler warnings highlighted by rpmdiff. Related: rhbz1244727 - fix for CVE-2015-3416 Resolves: 1244727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this...

Oracle Linux 7 : sqlite (ELSA-2015-1635)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1635 advisory. - Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416 Resolves: rhbz1244731 Tenable has extracted the preceding description block directly from the...