Lucene search
+L

75 matches found

OSV
OSV
•added 2022/01/29 11:15 p.m.•3 views

DEBIAN-CVE-2021-46658

savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindowfunc=true for a subquery...

5.5CVSS7.1AI score0.00387EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/01/29 12:00 a.m.•11 views

MariaDB 资源管理错误漏洞

MariaDB is a free and open source database management system from the MariaDB Mariadb Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB before 10.6.3 that stems from incorrect handling of withwindowfunc=true for the...

5.5CVSS7.2AI score0.00387EPSS
SaveExploits1References10
attackerkb
attackerkb
•added 2021/12/26 10:15 p.m.•16 views

CVE-2021-45715

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createwindowfunction has a use-after-free...

7.5CVSS5.8AI score0.0118EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/12/26 12:00 a.m.•10 views

Rust rusqlite crate 资源管理错误漏洞

Rust rusqlite crate is an ergonomic wrapper for using SQLite from Rust. it attempts to expose a rust-postgres-like interface. versions 0.25.x prior to 0.25.4 and 0.26.x prior to 0.26.2 of Rust rusqlite crate are vulnerable to security vulnerability, which stems from a resource management error in...

7.5CVSS5.5AI score0.0118EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2021/11/09 5:55 p.m.•15 views

sqlite: NULL pointer dereference in sqlite3ExprCodeTarget()

A NULL pointer dereference flaw was found in SQLite when rewriting select statements for window functions. This flaw allows an attacker who can execute SQL statements, to crash the application, resulting in a denial of service...

5.5CVSS7.5AI score0.0064EPSS
SaveExploits1References4
Veracode
Veracode
•added 2020/08/06 9:28 p.m.•45 views

Denial Of Service (DoS)

SQLite is vulnerable to denial of service. An attacker is able to cause a denial of service segmentation fault condition via a malicious window-function query due to a mishandling during the AggInfo object's initialization...

7.5CVSS6.9AI score0.0434EPSS
SaveExploits1References14Affected Software2
OSV
OSV
•added 2020/06/06 4:15 p.m.•8 views

DEBIAN-CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS7.2AI score0.04447EPSS
SaveExploits1References1
OSV
OSV
•added 2020/06/06 4:15 p.m.•21 views

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS7.7AI score
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2020/04/20 12:00 a.m.•34 views

EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1512)

According to the version of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo...

7.5CVSS6.9AI score0.0434EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2020/04/13 12:00 a.m.•12 views

The vulnerability of the SQLite database management system, related to memory usage after deallocation, allows a attacker to cause a service failure.

The vulnerability of the SQLite database management system is related to a window function error. Exploiting this vulnerability can allow an attacker to cause a service failure...

9.3CVSS7.4AI score0.06683EPSS
SaveExploits1References9Affected Software4
OSV
OSV
•added 2020/04/09 3:15 a.m.•13 views

AZL-39034 CVE-2020-11655 affecting package ceph for versions less than 18.2.1-1

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

7.5CVSS6.9AI score0.0434EPSS
SaveExploits1References1
OSV
OSV
•added 2020/04/09 3:15 a.m.•10 views

DEBIAN-CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

7.5CVSS6.9AI score0.0434EPSS
SaveExploits1References1
OSV
OSV
•added 2020/04/09 3:15 a.m.•11 views

ALPINE-CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

7.5CVSS6.9AI score0.0434EPSS
SaveExploits1References1
OSV
OSV
•added 2020/04/09 3:15 a.m.•18 views

UBUNTU-CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

7.5CVSS6.9AI score0.0434EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2020/04/09 3:15 a.m.•51 views

CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

7.5CVSS7AI score0.0434EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2020/04/09 2:49 a.m.•134 views

CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

7.5CVSS6.9AI score0.0434EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/04/09 2:49 a.m.•52 views

CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

7.5CVSS6.9AI score0.0434EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/09 12:00 a.m.•4 views

CVE-2020-11655: Improper Initialization

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

7.5CVSS6.9AI score0.0434EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/04/09 12:00 a.m.•24 views

PT-2020-5472

Name of the Vulnerable Software and Affected Versions SQLite versions through 3.31.1 Description The issue allows attackers to cause a denial of service, resulting in a segmentation fault, via a malformed window-function query. This is due to the mishandling of the AggInfo object's initialization...

7.8CVSS6.8AI score0.0434EPSS
SaveExploits1References69
OSV
OSV
•added 2019/12/18 6:15 a.m.•8 views

DEBIAN-CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS7.2AI score0.06937EPSS
SaveExploits0References1
Rows per page
Query Builder