Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications network charging and control vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2021-20227
A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threa...
Sqlite SqliteOracle Outside In Technology 8.5.5Oracle Communications Network Charging And Control 6.0.1Oracle Zfs Storage Appliance Kit 8.8Oracle Jd Edwards Enterpriseone ToolsOracle Mysql WorkbenchOracle Communications Network Charging And ControlOracle Enterprise Manager For Oracle Database 13.4.0.0
5
CVSSv2
CVE-2020-9327
In SQLite 3.31.1, isAuxiliaryVtabOperator allows malicious users to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
Sqlite Sqlite 3.31.1Netapp Cloud Backup -Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Siemens Sinec Infrastructure Network ServicesOracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And ControlOracle Communications Network Charging And Control 12.0.2Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Mysql WorkbenchOracle Outside In Technology 8.5.4Oracle Outside In Technology 8.5.5Oracle Zfs Storage Appliance Kit 8.8Oracle Communications Messaging Server 8.1
7.5
CVSSv2
CVE-2020-11656
In SQLite up to and including 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
Sqlite SqliteNetapp Ontap Select Deploy Administration Utility -Oracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And ControlOracle Communications Network Charging And Control 12.0.2Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle MysqlOracle Mysql WorkbenchOracle Outside In Technology 8.5.4Oracle Outside In Technology 8.5.5Oracle Zfs Storage Appliance Kit 8.8Oracle Communications Messaging Server 8.1Siemens Sinec Infrastructure Network ServicesTenable Tenable.sc
5
CVSSv2
CVE-2020-13871
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
Sqlite Sqlite 3.32.2Fedoraproject Fedora 33Debian Debian Linux 9.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Network Charging And Control 12.0.2Oracle Communications Network Charging And Control 6.0.1Oracle Zfs Storage Appliance Kit 8.8Oracle Communications Messaging Server 8.1Oracle Mysql WorkbenchSiemens Sinec Infrastructure Network ServicesNetapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -
2.1
CVSSv2
CVE-2020-15358
In SQLite prior to 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
Sqlite SqliteCanonical Ubuntu Linux 20.04Apple Iphone OsApple WatchosApple IcloudApple TvosApple IpadosApple MacosOracle Outside In Technology 8.5.4Oracle Outside In Technology 8.5.5Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Network Charging And Control 12.0.2Oracle MysqlOracle Communications Network Charging And Control 6.0.1Oracle Communications Messaging Server 8.1Oracle Communications Cloud Native Core Policy 1.14.0Siemens Sinec Infrastructure Network Services
2.1
CVSSv2
CVE-2020-13632
ext/fts3/fts3_snippet.c in SQLite prior to 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
Sqlite SqliteFedoraproject Fedora 32Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Netapp Cloud Backup -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Brocade Fabric Operating System -Netapp Hci Compute Node Firmware -Debian Debian Linux 9.0Siemens Sinec Infrastructure Network ServicesOracle Outside In Technology 8.5.4Oracle Outside In Technology 8.5.5Oracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And ControlOracle Zfs Storage Appliance Kit 8.8
5
CVSSv2
CVE-2020-11655
SQLite up to and including 3.31.1 allows malicious users to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
Sqlite SqliteNetapp Ontap Select Deploy Administration Utility -Debian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Oracle Communications Element ManagerOracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And ControlOracle Communications Network Charging And Control 12.0.2Oracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Enterprise Manager Ops Center 12.4.0.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle MysqlOracle Mysql WorkbenchOracle Outside In Technology 8.5.4
2.1
CVSSv2
CVE-2020-13434
SQLite up to and including 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Sqlite SqliteDebian Debian Linux 8.0Debian Debian Linux 9.0Fedoraproject Fedora 32Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Freebsd Freebsd 12.0Freebsd Freebsd 12.1Freebsd Freebsd 11.4Freebsd FreebsdOracle Outside In Technology 8.5.5Oracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And ControlOracle Communications Cloud Native Core Policy 1.14.0Apple Iphone OsApple WatchosApple TvosApple IpadosApple IcloudApple Itunes
2.1
CVSSv2
CVE-2020-13631
SQLite prior to 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
Sqlite SqliteFedoraproject Fedora 32Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Netapp Cloud Backup -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Brocade Fabric Operating System -Netapp Hci Compute Node Firmware -Siemens Sinec Infrastructure Network ServicesApple Iphone OsApple WatchosApple TvosApple IpadosApple IcloudApple ItunesApple MacosOracle Outside In Technology 8.5.4Oracle Outside In Technology 8.5.5Oracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And Control
4.4
CVSSv2
CVE-2020-13630
ext/fts3/fts3.c in SQLite prior to 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
Sqlite SqliteFedoraproject Fedora 32Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Netapp Cloud Backup -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Brocade Fabric Operating System -Netapp Hci Compute Node Firmware -Debian Debian Linux 9.0Siemens Sinec Infrastructure Network ServicesApple Iphone OsApple WatchosApple TvosApple IpadosApple IcloudApple ItunesApple MacosOracle Outside In Technology 8.5.4Oracle Outside In Technology 8.5.5Oracle Communications Network Charging And Control 6.0.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook