Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.2Kysely is a type-safe TypeScript SQL query builder.EPSS 0.4%Mar 20, 2026
- Medium6.5Cockpit is a headless content management system.EPSS 0.4%Mar 18, 2026
- High7.5An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supply…EPSS 0.3%Mar 12, 2026
- Medium5.3Navtor NavBox allows information disclosure via the /api/ais-data endpoint.EPSS 0.5%Mar 6, 2026
- High7.1Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the maili…EPSS 0.2%Mar 6, 2026
- High7.2LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite).EPSS 0.7%Mar 5, 2026
- Medium6.4Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution du…Feb 26, 2026
- Medium6.6LangGraph Checkpoint defines the base interface for LangGraph checkpointers.Feb 25, 2026
- UnknownApache Superset Improper Input ValidationKEVAug 12, 2025
- High7.2There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.EPSS 73.3%Jul 15, 2025
- Medium6.9An integer overflow can be triggered in SQLite’s function.EPSS 1.3%Apr 14, 2025
- Medium5.5In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash).EPSS 0.2%Apr 10, 2025
- High7.5In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer.EPSS 0.5%Apr 7, 2025
- Medium6.5In the Linux kernel, the following vulnerability has been resolved: nfsd: return -EINVAL when namelen is 0 When we have a corrupted main.sqlite in /var/lib/nfs/nfsdcld…EPSS 1.2%Oct 21, 2024
- Unknownriello-ups netman_204_firmware Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVOct 15, 2024
- Medium5.5A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c.EPSS 0.4%Jan 16, 2024
- High7.3A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical.EPSS 1.5%Dec 29, 2023
- High7.5An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.EPSS 2.4%May 9, 2023
- High7.3SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and…EPSS 0.4%Dec 12, 2022
- Critical9.8In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.EPSS 1.6%Sep 1, 2022
- High7.5In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.EPSS 1.5%Sep 1, 2022
- UnknownHeap-buffer-overflow in sqlite3VdbeExecAug 21, 2022
- High7.5SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.EPSS 23.3%Aug 3, 2022
- High7.5A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query.EPSS 3.9%Aug 24, 2021
- Medium5.5A flaw was found in SQLite's SELECT query functionality (src/select.c).EPSS 0.7%Mar 23, 2021