SQ
Product
sqlite
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 31Medium 15Low 0
Watch
Add sqlite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-19645 | 5.5 | Dec 9 | alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements Affected: through 3.30.1 |
| CVE-2017-13685 | 5.5 | Aug 29 | The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file Affected: 3.20.0 |
| CVE-2019-19924 | 5.3 | Dec 24 | SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c Affected: 3.30.1 |
| CVE-2021-45346 | 4.3 | Feb 14 | A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a… Affected: 3.35.1; 3.37.0 |
| CVE-2015-6607 | – | Oct 6 | SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586 Affected: through 3.8.8.3 |
| CVE-2015-5895 | – | Sep 18 | Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors Affected: through 3.8.10.1 |
| CVE-2013-7443 | – | Aug 12 | Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL statements Affected: 3.8.2 |
| CVE-2015-3717 | – | Jul 3 | Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause… Affected: before 3.8.9 |
| CVE-2015-3416 | – | Apr 24 | The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows… Affected: through 3.8.8.3 |
| CVE-2015-3415 | – | Apr 24 | The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of… Affected: through 3.8.8.3 |
| CVE-2015-3414 | – | Apr 24 | SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized… Affected: through 3.8.8.3 |
| CVE-2008-6593 | – | Apr 3 | SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid… Affected: 1.2.2 |
| CVE-2008-6592 | – | Apr 3 | thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via… Affected: 1.2.2 |
| CVE-2008-6590 | – | Apr 3 | Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to read arbitrary… Affected: 1.2.2 |
| CVE-2008-6589 | – | Apr 3 | Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject… Affected: 1.2.2 |