Lucene search
+L

1656 matches found

UbuntuCve
UbuntuCve
added 2019/11/25 8:15 p.m.37 views

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

7.5CVSS7.1AI score0.03333EPSS
SaveExploits0References2
Prion
Prion
added 2019/11/25 8:15 p.m.33 views

Sql injection

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

5CVSS7.3AI score0.03333EPSS
SaveExploits0References4Affected Software4
Debian CVE
Debian CVE
added 2019/11/25 7:32 p.m.49 views

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

7.5CVSS7.8AI score0.03333EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/11/25 7:32 p.m.32 views

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

8.4AI score0.03333EPSS
SaveExploits0References4
CVE
CVE
added 2019/11/25 7:32 p.m.242 views

CVE-2019-19244

CVE-2019-19244 affects SQLite 3.30.1, where sqlite3Select in select.c can crash if a sub‑select uses both DISTINCT and window functions and there is particular ORDER BY usage. The consequence is a denial of service via crash. Connected IBM/ASTRA pages confirm the CVE and describe the same SQLite ...

7.5CVSS7.6AI score0.03333EPSS
SaveExploits0References4Affected Software1
AlpineLinux
AlpineLinux
added 2019/11/25 7:32 p.m.71 views

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

7.5CVSS8.6AI score0.03333EPSS
SaveExploits0
Prion
Prion
added 2019/11/25 5:15 p.m.22 views

Code injection

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...

3.6CVSS4.6AI score0.00304EPSS
SaveExploits1References2Affected Software2
RedhatCVE
RedhatCVE
added 2019/10/31 9:57 p.m.25 views

CVE-2019-16680

A path traversal vulnerability was discovered in the file-roller Archive Manager for GNOME in the way file paths with special characters are sanitized. Archives containing the sequence of characters "../" in a file path may be vulnerable to this flaw. A remote attacker could exploit this flaw by...

4.3CVSS2.7AI score0.02132EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2019/10/24 9:19 p.m.11 views

ansible: sub parameters marked as no_log are not masked in certain failure scenarios

A flaw was found in ansible. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processed. As a result, data in the sub parameter fields will not be...

7.3CVSS7.2AI score0.00424EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2019/10/24 9:19 p.m.9 views

ansible: sub parameters marked as no_log are not masked in certain failure scenarios

A flaw was found in ansible. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processed. As a result, data in the sub parameter fields will not be...

7.3CVSS7.2AI score0.00424EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2019/10/24 9:19 p.m.8 views

ansible: sub parameters marked as no_log are not masked in certain failure scenarios

A flaw was found in ansible. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processed. As a result, data in the sub parameter fields will not be...

7.3CVSS7.2AI score0.00424EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2019/10/20 12:0 a.m.242 views

NASA NODIS Cross Site Scripting

Cross-site Scripting XSS Vulnerability in NASA through User Agent - Binit Ghimire As of October 19, 2019, there exists a Reflected Cross-site Scripting XSS vulnerability in a sub-domain of the official NASA website as a result of the User Agent HTTP request header getting displayed in the webpage...

7.4AI score
SaveExploits0
NVD
NVD
added 2019/10/14 3:15 p.m.38 views

CVE-2019-14858

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processe...

7.3CVSS5.9AI score0.00424EPSS
SaveExploits0References8
OSV
OSV
added 2019/10/14 3:15 p.m.1 views

DEBIAN-CVE-2019-14858

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processe...

5.5CVSS6.1AI score0.00424EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/14 3:15 p.m.28 views

CVE-2019-14858

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processe...

5.5CVSS5.8AI score
SaveExploits0References8
OSV
OSV
added 2019/10/14 3:15 p.m.8 views

PYSEC-2019-171

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processe...

7.3CVSS6.6AI score0.00424EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2019/10/14 3:15 p.m.30 views

CVE-2019-14858

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processe...

7.3CVSS6.6AI score0.00424EPSS
SaveExploits0References2
PyPA
PyPA
added 2019/10/14 3:15 p.m.8 views

PYSEC-2019-171

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processe...

7.3CVSS6.7AI score0.00424EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2019/10/14 3:15 p.m.11 views

UBUNTU-CVE-2019-14858

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processe...

7.3CVSS6.6AI score0.00424EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2019/10/14 2:36 p.m.36 views

CVE-2019-14858

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processe...

7.3CVSS6.1AI score0.00424EPSS
SaveExploits0References8
Rows per page
Query Builder