Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,903

Export CSV
CVE-2019-19926

sqlite: error mishandling because of incomplete fix of CVE-2019-19880

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.

CVSS 3.1 · 7.5 High EPSS 8.0% KEV · Not listed
Vendors
Debian Netapp Opensuse and 5 more
Products
Debian Linux Cloud Backup Backports Sle and 10 more
CVE-2019-19925

sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Debian Netapp Opensuse and 5 more
Products
Debian Linux Cloud Backup Backports Sle and 11 more
CVE-2019-19924

sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

CVSS 3.1 · 5.3 Medium EPSS 10.7% KEV · Not listed
Vendors
Apache Netapp Oracle and 3 more
Products
Bookkeeper Cloud Backup Mysql Workbench and 3 more
CVE-2019-19923

sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Debian Netapp Opensuse and 5 more
Products
Debian Linux Cloud Backup Backports Sle and 11 more
CVE-2019-19880

sqlite: invalid pointer dereference in exprListAppendList in window.c

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.

CVSS 3.1 · 7.5 High EPSS 6.9% KEV · Not listed
Vendors
Debian Netapp Opensuse and 5 more
Products
Debian Linux Cloud Backup Backports Sle and 10 more
CVE-2019-19645

sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Netapp Oracle Siemens and 2 more
Products
Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 3 more
CVE-2019-19317

sqlite: omits bits from the colUsed bitmask in the case of a generated column

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

CVSS 3.1 · 9.8 Critical EPSS 4.7% KEV · Not listed
Vendors
Netapp Oracle Siemens and 1 more
Products
Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 2 more
CVE-2019-5443

curl: Windows OpenSSL engine code injection

A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation. If that curl is invoked by a privileged user it can do anything it wants.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Haxx Microsoft Netapp and 1 more
Products
Curl Windows Oncommand Insight and 7 more