Lucene search
+L

7001 matches found

osv_debian
osv_debian
•added 2020/06/06 4:15 p.m.•13 views

DEBIAN-CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS7.2AI score0.04447EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/06/06 4:15 p.m.•23 views

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS7.7AI score
SaveExploits0References12
NVD
NVD
•added 2020/06/06 4:15 p.m.•39 views

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS7.6AI score0.04447EPSS
SaveExploits1References12
UbuntuCve
UbuntuCve
•added 2020/06/06 4:15 p.m.•58 views

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS6.9AI score0.04447EPSS
SaveExploits1References4
Prion
Prion
•added 2020/06/06 4:15 p.m.•41 views

Design/Logic Flaw

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

5CVSS7.4AI score0.04447EPSS
SaveExploits1References10Affected Software10
CVE
CVE
•added 2020/06/06 3:37 p.m.•386 views

CVE-2020-13871

SQLite 3.32.2 is affected by a use-after-free in resetAccumulator (select.c) due to a late parse tree rewrite for window functions. Impact could include a crash or arbitrary code execution. Remediation: upgrade to SQLite 3.32.3 or later (fix upstream).

7.5CVSS7.4AI score0.04447EPSS
SaveExploits1References12Affected Software1
Cvelist
Cvelist
•added 2020/06/06 3:37 p.m.•101 views

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5AI score0.04447EPSS
SaveExploits1References10
Debian CVE
Debian CVE
•added 2020/06/06 3:37 p.m.•116 views

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS7.6AI score0.04447EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/06 12:00 a.m.•7 views

CVE-2020-13871: Use After Free

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS7.5AI score0.04447EPSS
SaveExploits1References20
Microsoft KB
Microsoft KB
•added 2020/05/20 12:00 a.m.•81 views

Update Rollup 3 for System Center 2012 R2 Data Protection Manager

Update Rollup 3 for System Center 2012 R2 Data Protection Manager Introduction This article describes new features and issues that are fixed in Update Rollup 3 for Microsoft System Center 2012 R2 Data Protection Manager DPM. Additionally, this article contains the installation instructions for...

6AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2020/05/18 10:24 a.m.•16 views

HTTP/2: large amount of data requests leads to denial of service

A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a...

7.8CVSS7.4AI score0.59547EPSS
SaveExploits0References8
Microsoft KB
Microsoft KB
•added 2020/05/12 2:00 p.m.•257 views

May 12, 2020—KB4551853 (OS Build 17763.1217)

None None...

9.3CVSS6.8AI score0.8197EPSS
SaveExploits5
osv_cve
osv_cve
•added 2020/05/11 4:15 p.m.•23 views

CVE-2020-12754

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A crafted application can obtain control of device input via the window system service. The LG ID is LVE-SMP-170011 May 2020...

7.8CVSS7.1AI score0.00295EPSS
SaveExploits0References1
Prion
Prion
•added 2020/05/11 4:15 p.m.•36 views

Design/Logic Flaw

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A crafted application can obtain control of device input via the window system service. The LG ID is LVE-SMP-170011 May 2020...

6.8CVSS7.5AI score0.00295EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/05/11 3:47 p.m.•41 views

CVE-2020-12754

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A crafted application can obtain control of device input via the window system service. The LG ID is LVE-SMP-170011 May 2020...

7.6AI score0.00295EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/11 12:00 a.m.•11 views

CVE-2020-12754: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A crafted application can obtain control of device input via the window system service. The LG ID is LVE-SMP-170011 May 2020...

7.8CVSS7.2AI score0.00295EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/05/11 12:00 a.m.•4 views

PT-2020-13245

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.2, 8.0, 8.1, 9, and 10 Description A crafted application can obtain control of device input via the window system service. Recommendations For Android OS version 7.2, update to a version that includ...

7.8CVSS0.00295EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2020/04/30 12:00 a.m.•57 views

Fedora: Security Advisory for gnuchess (FEDORA-2020-3eaf264c4b)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.6AI score0.01468EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2020/04/28 7:15 p.m.•16 views

CVE-2020-9482

If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging ou...

6.5CVSS6.5AI score0.02672EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2020/04/28 3:49 p.m.•18 views

sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite error handling...

5.3CVSS7.3AI score0.10748EPSS
SaveExploits0References4
Rows per page
Query Builder