Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.9SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.Nov 27, 2019
- High7.5sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.Nov 25, 2019
- Low3.3On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after…Nov 19, 2019
- Critical9.8PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityKEVEPSS 99.7%Oct 28, 2019
- High7.8Android Kernel Use-After-Free VulnerabilityKEVEPSS 72.1%Oct 11, 2019
- Critical9.8Exim Out-of-bounds Write VulnerabilityKEVEPSS 41.6%Sep 27, 2019
- Medium6.3It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library.Sep 25, 2019
- High7.5An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3.Sep 24, 2019
- Medium6.5In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a…Sep 9, 2019
- High7.5An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4.Sep 6, 2019
- High7.5An issue was discovered in OpenLDAP 2.x before 2.4.48.Jul 26, 2019
- Medium4.9An issue was discovered in the server in OpenLDAP before 2.4.48.Jul 26, 2019
- High7.8Linux Kernel Improper Privilege Management VulnerabilityKEVEPSS 52.2%Jul 17, 2019
- High7.5In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU r…Jun 24, 2019
- Critical9.8BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.Jun 19, 2019
- Critical9.8A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3…Jun 7, 2019
- Critical9.8Exim Mail Transfer Agent (MTA) Improper Input ValidationKEVEPSS 100.0%Jun 5, 2019
- Critical9.8SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.May 30, 2019
- High8.1An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0.May 10, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityKEVEPSS 65.0%Apr 8, 2019
- Critical9.1urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: UR…Mar 23, 2019
- Critical9.8Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization.Mar 8, 2019
- Critical9.8In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regula…Feb 26, 2019
- Medium5.9An issue was discovered in OpenSSH 7.9.Jan 31, 2019
- Medium6.8An issue was discovered in OpenSSH 7.9.Jan 31, 2019