Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Medium6.5In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a…Vuln · CVE-2019-16168 · sqlite · sqlite · CVE.org · FIRST EPSS · NIST NVDEPSS 4.3%Sep 9, 2019
Critical9.8SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.Vuln · CVE-2019-8457 · sqlite · sqlite · CVE.org · FIRST EPSS · NIST NVDEPSS 45.4%May 30, 2019
High8.1An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0.Vuln · CVE-2019-5018 · sqlite · sqlite · CVE.org · FIRST EPSS · NIST NVDEPSS 6.7%May 10, 2019
High7.5In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c.Vuln · CVE-2019-9937 · sqlite · sqlite · CVE.org · FIRST EPSS · NIST NVDEPSS 6.1%Mar 22, 2019
High7.5In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an…Vuln · CVE-2019-9936 · sqlite · sqlite · CVE.org · FIRST EPSS · NIST NVDEPSS 5.3%Mar 22, 2019