CVE-2020-13632 vulnerabilities and exploits

(subscribe to this query)

In SQLite up to and including 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

Sqlite Sqlite Netapp Ontap Select Deploy Administration Utility -Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control Oracle Communications Network Charging And Control 12.0.2 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Mysql Oracle Mysql Workbench Oracle Outside In Technology 8.5.4 Oracle Outside In Technology 8.5.5 Oracle Zfs Storage Appliance Kit 8.8 Oracle Communications Messaging Server 8.1 Siemens Sinec Infrastructure Network Services Tenable Tenable.sc

pragma.c in SQLite up to and including 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

Sqlite Sqlite Siemens Sinec Infrastructure Network Services Tenable Tenable.sc Oracle Mysql Workbench Netapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -

Versions of handlebars before 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an malicious user to execute arbitrary code through crafted payloads.

Handlebars.js Project Handlebars.js 1.0.6 Handlebars.js Project Handlebars.js 1.0.7 Handlebars.js Project Handlebars.js 1.0.8 Handlebars.js Project Handlebars.js 1.0.9 Handlebars.js Project Handlebars.js 1.0.10 Handlebars.js Project Handlebars.js 1.0.11 Handlebars.js Project Handlebars.js 1.0.12 Handlebars.js Project Handlebars.js 1.1.0 Handlebars.js Project Handlebars.js 1.1.1 Handlebars.js Project Handlebars.js 1.1.2 Handlebars.js Project Handlebars.js 1.2.0 Handlebars.js Project Handlebars.js 1.2.1 Handlebars.js Project Handlebars.js 1.3.0 Handlebars.js Project Handlebars.js 2.0.0 Handlebars.js Project Handlebars.js 3.0.0 Handlebars.js Project Handlebars.js 3.0.1 Handlebars.js Project Handlebars.js 3.0.2 Handlebars.js Project Handlebars.js 3.0.3 Handlebars.js Project Handlebars.js 4.0.0 Handlebars.js Project Handlebars.js 4.0.1 Handlebars.js Project Handlebars.js 4.0.2 Handlebars.js Project Handlebars.js 4.0.3

alter.c in SQLite up to and including 3.30.1 allows malicious users to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

Sqlite Sqlite Netapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -Oracle Mysql Workbench Tenable Tenable.sc Siemens Sinec Infrastructure Network Services

SQLite up to and including 3.31.1 allows malicious users to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid to mis-parse the URL...

Php Php Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Clustered Data Ontap -

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash.

Php Php Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Clustered Data Ontap -Oracle Communications Diameter Signaling Router

The package underscore from 1.13.0-0 and prior to 1.13.0-2, from 1.3.2 and prior to 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

Underscorejs Underscore Debian Debian Linux 9.0 Debian Debian Linux 10.0 Tenable Tenable.sc Fedoraproject Fedora 33 Fedoraproject Fedora 34

5 Github repositories

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.

Php Php Fedoraproject Fedora 31 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 10.0 Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 12.04 Netapp Clustered Data Ontap -Oracle Communications Diameter Signaling Router Tenable Tenable.sc

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook