Lucene search
+L
GhostSqlite3

3 matches found

CVE
CVE
added 2023/04/11 12:0 a.m.144 views

CVE-2020-24736

CVE-2020-24736 describes a SQLite3 buffer overflow that can allow a local attacker to cause a denial of service. The vulnerability is documented for SQLite 3.27.1 and earlier. Connected advisories from MiracleLinux (AXSA-2023-6185:03), Alibaba Cloud Linux 3 (ALINUX3-SA-2023:0072), TencentOS Serve...

5.5CVSS5.2AI score0.00347EPSS
Save
CVE
CVE
added 2023/03/16 8:14 p.m.138 views

CVE-2022-43441

CVE-2022-43441 affects Ghost Foundation node-sqlite3 5.1.1, with a code execution vulnerability in the Statement Bindings functionality. A specially crafted Javascript input can lead to arbitrary code execution. Public details in the provided documents confirm the vulnerable component and impact ...

9.8CVSS9.5AI score0.02356EPSS
Save
CVE
CVE
added 2022/05/01 3:25 p.m.129 views

CVE-2022-21227

CVE-2022-21227 affects the sqlite3 package prior to 5.0.3. The vulnerability is a Denial of Service caused by improper input handling in toString, where passing a crafted Function object can cause the V8 engine to crash. Public documents consistently describe this DoS vector and note the affected...

7.5CVSS7.5AI score0.02068EPSS
Save