Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2020-13434 vulnerabilities and exploits

(subscribe to this query)
187
VMScore
CVE-2020-13434
SQLite up to and including 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Sqlite SqliteDebian Debian Linux 8.0Debian Debian Linux 9.0Fedoraproject Fedora 32Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Freebsd Freebsd 12.0Freebsd Freebsd 12.1Freebsd Freebsd 11.4Freebsd FreebsdOracle Outside In Technology 8.5.5Oracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And ControlOracle Communications Cloud Native Core Policy 1.14.0Apple Iphone OsApple WatchosApple TvosApple IpadosApple IcloudApple Itunes
668
VMScore
CVE-2020-11656
In SQLite up to and including 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
Sqlite SqliteNetapp Ontap Select Deploy Administration Utility -Oracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And ControlOracle Communications Network Charging And Control 12.0.2Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle MysqlOracle Mysql WorkbenchOracle Outside In Technology 8.5.4Oracle Outside In Technology 8.5.5Oracle Zfs Storage Appliance Kit 8.8Oracle Communications Messaging Server 8.1Siemens Sinec Infrastructure Network ServicesTenable Tenable.sc
668
VMScore
CVE-2019-19646
pragma.c in SQLite up to and including 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
Sqlite SqliteSiemens Sinec Infrastructure Network ServicesTenable Tenable.scOracle Mysql WorkbenchNetapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -
668
VMScore
CVE-2019-19919
Versions of handlebars before 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an malicious user to execute arbitrary code through crafted payloads.
Handlebars.js Project Handlebars.js 1.0.6Handlebars.js Project Handlebars.js 1.0.7Handlebars.js Project Handlebars.js 1.0.8Handlebars.js Project Handlebars.js 1.0.9Handlebars.js Project Handlebars.js 1.0.10Handlebars.js Project Handlebars.js 1.0.11Handlebars.js Project Handlebars.js 1.0.12Handlebars.js Project Handlebars.js 1.1.0Handlebars.js Project Handlebars.js 1.1.1Handlebars.js Project Handlebars.js 1.1.2Handlebars.js Project Handlebars.js 1.2.0Handlebars.js Project Handlebars.js 1.2.1Handlebars.js Project Handlebars.js 1.3.0Handlebars.js Project Handlebars.js 2.0.0Handlebars.js Project Handlebars.js 3.0.0Handlebars.js Project Handlebars.js 3.0.1Handlebars.js Project Handlebars.js 3.0.2Handlebars.js Project Handlebars.js 3.0.3Handlebars.js Project Handlebars.js 4.0.0Handlebars.js Project Handlebars.js 4.0.1Handlebars.js Project Handlebars.js 4.0.2Handlebars.js Project Handlebars.js 4.0.3
446
VMScore
CVE-2020-11655
SQLite up to and including 3.31.1 allows malicious users to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
Sqlite SqliteNetapp Ontap Select Deploy Administration Utility -Debian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Oracle Communications Element ManagerOracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And ControlOracle Communications Network Charging And Control 12.0.2Oracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Enterprise Manager Ops Center 12.4.0.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle MysqlOracle Mysql WorkbenchOracle Outside In Technology 8.5.4
188
VMScore
CVE-2019-19645
alter.c in SQLite up to and including 3.30.1 allows malicious users to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
Sqlite SqliteNetapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -Oracle Mysql WorkbenchTenable Tenable.scSiemens Sinec Infrastructure Network Services
445
VMScore
CVE-2021-21702
In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash.
Php PhpDebian Debian Linux 9.0Debian Debian Linux 10.0Netapp Clustered Data Ontap -Oracle Communications Diameter Signaling Router
445
VMScore
CVE-2020-7071
In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid to mis-parse the URL...
Php PhpDebian Debian Linux 9.0Debian Debian Linux 10.0Netapp Clustered Data Ontap -
580
VMScore
CVE-2021-23358
The package underscore from 1.13.0-0 and prior to 1.13.0-2, from 1.3.2 and prior to 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.
Underscorejs UnderscoreDebian Debian Linux 9.0Debian Debian Linux 10.0Tenable Tenable.scFedoraproject Fedora 33Fedoraproject Fedora 34
570
VMScore
CVE-2020-7069
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
Php PhpFedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Opensuse Leap 15.1Opensuse Leap 15.2Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 12.04Netapp Clustered Data Ontap -Oracle Communications Diameter Signaling RouterTenable Tenable.sc
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook