Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

Security Advisories for https://github.com/sqlite/sqlite from cpansa Clear Filters

Critical
almost 4 years ago

An issue was found in fts5UnicodeTokenize() in ext/fts5/fts5_tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode "control-characters" (class Cc), was treating embedded nul characters as tokens. The issue was fixed in sqlite-3.34.0 a... CPANSA-DBD-SQLite-2021-20223-sqlite

cpan DBD-SQLite
High
over 6 years ago

ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind. CPANSA-DBD-SQLite-2019-19959

cpan DBD-SQLite
High
over 6 years ago

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error. CPANSA-DBD-SQLite-2019-20218

cpan DBD-SQLite
High
over 6 years ago

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results). CPANSA-DBD-SQLite-2019-19923

cpan DBD-SQLite
Moderate
over 6 years ago

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling. CPANSA-DBD-SQLite-2019-19924

cpan DBD-SQLite
High
over 6 years ago

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. CPANSA-DBD-SQLite-2019-19925

cpan DBD-SQLite
High
over 6 years ago

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880. CPANSA-DBD-SQLite-2019-19926

cpan DBD-SQLite
High
over 6 years ago

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled. CPANSA-DBD-SQLite-2019-19880

cpan DBD-SQLite
High
over 6 years ago

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash. CPANSA-DBD-SQLite-2019-19603

cpan DBD-SQLite
Moderate
over 6 years ago

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements. CPANSA-DBD-SQLite-2019-19645

cpan DBD-SQLite
Critical
over 6 years ago

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. CPANSA-DBD-SQLite-2019-19646

cpan DBD-SQLite
Critical
over 6 years ago

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact. CPANSA-DBD-SQLite-2019-19317

cpan DBD-SQLite
Moderate
over 6 years ago

SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c. CPANSA-DBD-SQLite-2019-19242-sqlite

cpan DBD-SQLite
Moderate
over 6 years ago

SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c. CPANSA-DBD-SQLite-2019-19242

cpan DBD-SQLite
High
over 6 years ago

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage. CPANSA-DBD-SQLite-2019-19244

cpan DBD-SQLite

Filter by Severity

Moderate 210 High 101 Critical 49 Low 6

Filter by Source

CPAN Security Advisory Database 862 Erlang Ecosystem Foundation 68 GitHub Advisory Database 31,064

Filter by Ecosystem

cpan 861

Filter by Package

perl 45 DBD-SQLite 42 MT 37 Mojolicious 18 Yukki 14 Dpkg 14 MySQL-Admin 13 Zonemaster-GUI 11 Kossy 11 YATT-Lite 10 Yancy 10 UR 10 Ukigumo-Server 10 SockJS 10 App-Netdisco 10 Zabbix-Reporter 10 Sidef 9 Resource-Pack-jQuery 9 DBI 9 Squatting 9 Stardust 9 Plack-Debugger 9 Yote 9 JS-jQuery 9 Imager 7 DBD-mysql 7 Net-Dropbear 7 CGI 6 File-Path 6 libwww-perl 6 Git-Raw 5 Win32-File-Summary 5 Net-CIDR-Lite 5 ActivePerl 5 Alien-SVN 4 Sereal-Decoder 4 YAML-LibYAML 4 Jifty 4 Sereal-Encoder 4 Git-XS 4 Cpanel-JSON-XS 4 Tk 4 HTTP-Tiny 4 CGI-Simple 4 CryptX 4 Archive-Unzip-Burst 4 Plack 4 Compress-Raw-Zlib 4 Lemonldap-NG-Portal 4 Apache-Session 3 Image-ExifTool 3 DBD-MariaDB 3 Plack-Middleware-Session 3 Safe 3 Lemonldap-NG-Common 3 SOAP-Lite 3 YAML-Syck 3 XML-LibXML 3 Net-DNS 3 Crypt-DSA 3 UI-Dialog 3 Perl6-Pugs 3 Lemonldap-NG-Manager 3 GBrowse 3 Net-SNMP 3 Config-Model 3 DBD-Pg 3 Archive-Tar 3 Crypt-CBC 3 Lemonldap-NG-Handler 3 Dancer 3 Crypt-Sodium-XS 3 Encode 3 CPAN 3 mod_perl 3 cppAdaptive1 2 CGI-Session 2 cppAdaptive2 2 App-revealup 2 Win32-Printer 2 App-cpanminus 2 BSON-XS 2 EasyTCP 2 Storable 2 Net-OpenID-Consumer 2 Tcl 2 PathTools 2 Spreadsheet-ParseXLSX 2 FCGI 2 XML-Parser 2 YAML 2 Catalyst-Runtime 2 Zonemaster-Backend 2 IO-Socket-SSL 2 Alien-FreeImage 2 Crypt-Perl 2 POSIX-2008 2 Net-Statsd-Lite 2 PAR 2 HTTP-Session2 2 Perl-Tidy 2 Boost-Graph 2 Apache-Session-Browseable 2 HarfBuzz-Shaper 2 Archive-Zip 2 MHonArc 2 Crypt-SaltedHash 2 Plack-Middleware-Statsd 2 Digest 2 Locale-Maketext 2 Crypt-Random 2 Mozilla-CA 2 Crypt-OpenSSL-PKCS12 2 Email-Address 2 Compress-Raw-Bzip2 2 DBIx-Class-EncodedColumn 2 Crypt-NaCl-Sodium 2 Module-Metadata 1 Catalyst-Action-REST 1 Amon2-Auth-Site-LINE 1 XML-Atom 1 Net-Xero 1 JavaScript-Duktape 1 IPC-Run 1 CPAN-Checksums 1 JSON-XS 1 Starman 1 CGI-Application-Plugin-AutoRunmode 1 Apache-Wyrd 1 WWW-UsePerl-Server 1 Net-IP-LPM 1 Imager-File-GIF 1 Net-IPv4Addr 1 Plack-Middleware-XSRFBlock 1 Gazelle 1 Amon2 1 Amon2-Plugin-Web-CSRFDefender 1 RPC-XML 1 eperl 1 Crypt-RandomEncryption 1 Mojo-DOM-Role-Analyzer 1 Mail-Audit 1 Graphics-ColorNames 1 Dancer2 1 Catalyst-Controller-Combine 1 PAR-Packer 1 Devel-StackTrace 1 ExtUtils-MakeMaker 1 Net-CIDR-Set 1 Sub-HandlesVia 1 Crypt-SysRandom-XS 1 SVG-Sparkline 1 Apache2-API 1 App-Github-Email 1 XML-Simple 1 Cmd-Dwarf 1 Search-OpenSearch-Server 1 WWW-Mechanize-Cached 1 Image-Info 1 MARC-File-XML 1 Otogiri 1 Term-ReadLine-Gnu 1 File-Temp 1 Pinto 1 LWP-Protocol-Net-Curl 1 Crypt-Primes 1 Catalyst-Plugin-Session 1 String-Compare-ConstantTime 1 Crypt-OpenSSL-RSA 1 Alien-PCRE2 1 Data-FormValidator 1 Clipboard 1 XML-Twig 1 Text-CSV_XS 1 Redis-Fast 1 Crypt-OpenSSL-DSA 1 IO-Compress 1 Catalyst-Plugin-Authentication 1 Authen-SASL 1 Apache-AuthCAS 1 HTTP-Daemon 1 perl-ldap 1 Apache-SessionX 1 Amazon-Credentials 1 Crypt-PasswdMD5 1 Mojolicious-Plugin-OAuth2 1 WWW-Mechanize 1 Filesys-SmbClientParser 1 Template-Toolkit 1 Web-Passwd 1 PApp 1 CGI-Application-Dispatch 1 Crypt-Random-Source 1 Catalyst-Plugin-Static 1 Apache2-AuthAny 1 SVN-Look 1 CGI-apacheSSI 1 Module-Load-Conditional 1 Business-OnlinePayment-StoredTransaction 1 Net-Netmask 1

Filter by Repository

https://github.com/jquery/jquery 108 https://github.com/Perl/perl5 21 https://github.com/sqlite/sqlite 15 https://github.com/mojolicious/mojo 12 https://github.com/twbs/bootstrap 9 https://github.com/perl5-dbi/DBD-mysql 7 https://github.com/madler/zlib 6 https://sourceforge.net/projects/sourceforge.net 6 https://github.com/briandfoy/cpan-security-advisory 6 https://github.com/glennrp/libpng 6 https://github.com/stigtsp/Net-CIDR-Lite 5 https://github.com/rurban/Cpanel-JSON-XS 4 https://github.com/perl5-dbi/dbi 4 https://github.com/facebook/zstd 4 https://github.com/libtom/libtomcrypt 3 https://github.com/kmx/alien-freeimage 3 https://github.com/libgit2/security 3 https://github.com/jquery/jquery-ui 3 https://github.com/redis/hiredis 3 https://github.com/dod38fr/config-model 3 https://github.com/tonycoz/imager 3 https://github.com/cpan-authors/YAML-Syck 3 https://github.com/jib/archive-tar-new 2 https://github.com/richgel999/miniz 2 https://github.com/blog/1938-git-client-vulnerability-announced 2 https://github.com/robrwo/Plack-Middleware-Statsd 2 https://github.com/jedisct1/libsodium 2 https://github.com/ingydotnet/yaml-libyaml-pm 2 https://github.com/exiftool/exiftool 2 https://github.com/svaarala/duktape 2 https://github.com/chansen/p5-http-tiny 2 https://github.com/miyagawa/cpanminus 2 https://github.com/robrwo/perl-Crypt-SaltedHash 2 https://github.com/hashcat/hashcat 2 https://github.com/ingydotnet/yaml-pm 2 https://github.com/FGasper/p5-Crypt-Perl 2 https://github.com/libtom/libtommath 2 https://github.com/PerlDancer/Dancer 2 https://github.com/cpan-authors/XML-Parser 2 https://github.com/chartjs/Chart.js 2 https://github.com/DCIT/perl-CryptX 2 https://github.com/andk/cpanpm 2 https://github.com/AndyA/CGI--Simple 2 https://github.com/tokuhirom/HTTP-Session2 2 https://github.com/libwww-perl/libwww-perl 2 https://github.com/cpan-authors/crypt-nacl-sodium 2 https://github.com/LemonLDAPNG/Apache-Session-Browseable 2 https://github.com/mitmproxy/pdoc 2 https://github.com/zonemaster/zonemaster-backend 2 https://github.com/kazeburo/Kossy 1 https://github.com/perl-catalyst/Catalyst-Plugin-Session 1 https://github.com/ycdxsb/WindowsPrivilegeEscalation 1 https://github.com/svarshavchik/Net-CIDR 1 https://github.com/houseabsolute/Data-Validate-IP 1 https://github.com/bluefeet/GitLab-API-v4 1 https://github.com/rjbs/Email-Address 1 https://github.com/redhotpenguin/perl-Archive-Zip 1 https://github.com/FastCGI-Archives/fcgi2 1 https://github.com/jkeenan/File-Path 1 https://github.com/perl-catalyst/FCGI 1 https://github.com/mkj/dropbear 1 https://github.com/perl-net-saml2/perl-XML-Sig 1 https://github.com/pjuhasz/JSON-SIMD 1 https://github.com/Leont/crypt-argon2 1 https://github.com/dankogai/p5-encode 1 https://github.com/dsully/perl-crypt-openssl-pkcs12 1 https://github.com/cromedome/cgi-application-plugin-captcha 1 https://github.com/hakimel/reveal.js 1 https://github.com/rjbs/Email-MIME 1 https://github.com/zhuowei/worthdoingbadly.com 1 https://github.com/amaltsev/XAO-Web 1 https://github.com/toddr/Crypt-OpenSSL-RSA 1 https://github.com/tchatzi/Authen-TOTP 1 https://github.com/libwww-perl/WWW-Mechanize-Cached 1 https://github.com/mojomojo/mojomojo 1 https://github.com/faraco/App-Github-Email 1 https://github.com/kraih/mojo 1 https://github.com/libwww-perl/lwp-protocol-https 1 https://github.com/Perl-Toolchain-Gang/ExtUtils-MakeMaker 1 https://github.com/ytnobody/Otogiri 1 https://github.com/sgnix/kelp 1 https://sourceforge.net/projects/net-snmp 1 https://github.com/angular/angular.js 1 https://github.com/karpet/Dezi 1 https://github.com/gnustavo/SVN-Look 1 https://github.com/markstos/CGI--Application 1 https://github.com/abw/Template2 1 https://github.com/rschupp/Module-ScanDeps 1 https://github.com/perltidy/perltidy 1 https://github.com/karenetheridge/Crypt-Random-Source 1 https://github.com/certifi/python-certifi 1 https://github.com/dajobe/raptor 1 https://github.com/seagirl/dwarf 1 https://github.com/Dual-Life/Devel-PPPort 1 https://github.com/Perl-Toolchain-Gang/HTTP-Tiny 1 https://github.com/richardc/perl-file-find-rule 1 https://github.com/jmcnamara/spreadsheet-parseexcel 1 https://github.com/DCIT/perl-Crypt-JWT 1 https://github.com/gwadej/svg-sparkline 1 https://github.com/karpet/search-opensearch-server 1 https://github.com/grantm/xml-simple 1 https://github.com/tokuhirom/Amon 1 https://bitbucket.org/shlomif/perl-config-inifiles 1 https://github.com/harfbuzz/harfbuzz 1 https://github.com/gbarr/perl-authen-sasl 1 https://github.com/gisle/html-parser 1 https://github.com/creaktive/LWP-Protocol-Net-Curl 1 https://github.com/moxiecode/plupload 1 https://github.com/moment/moment 1 https://github.com/markstos/CGI.pm 1 https://github.com/wrog/Net-OpenID-Consumer 1 https://github.com/mtrmac/IPTables-Parse 1 https://github.com/atoomic/Crypt-Random 1 https://github.com/cpan-authors/XML-LibXML 1 https://github.com/perl-Crypt-OpenPGP/Crypt-Random 1 https://github.com/haile01/perl_spreadsheet_excel_rce_poc 1 https://github.com/google/brotli 1 https://github.com/lstein/Lib-Crypt-CBC 1 https://github.com/plack/Plack 1 https://github.com/jberger/Galileo 1 https://github.com/kazuho/Starlet 1 https://github.com/robrwo/Net-Statsd-Tiny 1 https://github.com/snapappointments/bootstrap-select 1 https://github.com/gray/compress-lz4 1 https://github.com/plack/Plack-Middleware-Session 1 https://github.com/gbarr/perl-Convert-ASN1 1 https://github.com/bwva/Concierge-Sessions 1 https://github.com/robrwo/perl-Net-CIDR-Set 1 https://github.com/robrwo/Net-Statsd-Lite 1 https://github.com/miyagawa/Starman 1 https://github.com/perl-catalyst/Catalyst-Plugin-Authentication 1 https://github.com/atoomic/Crypt-Primes 1 https://github.com/kazeburo/Plack-Middleware-Session-Simple 1 https://github.com/yuki-kimoto/DBIx-Custom 1 https://github.com/dagolden/Capture-Tiny 1 https://bitbucket.org/xi/libyaml 1 https://github.com/libwww-perl/HTTP-Daemon 1 https://github.com/atrodo/Net-Dropbear 1 https://github.com/marcusramberg/Mojolicious-Plugin-OAuth2 1 https://github.com/xsawyerx/app-genpass 1 https://github.com/kberov/Ado 1 https://github.com/bluefeet/Starch 1 https://github.com/robrwo/Text-Minify-XS 1 https://github.com/preaction/Log-Any 1 https://github.com/cpan-authors/Text-CSV_XS 1 https://github.com/robrwo/CatalystX-Statsd 1 https://github.com/thaljef/Pinto 1 https://github.com/PerlDancer/Dancer2 1 https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP 1 https://github.com/Perl-Toolchain-Gang/File-Temp 1 https://github.com/clintongormley/perl-html-stripscripts 1 https://github.com/redhotpenguin/perl-soaplite 1 https://github.com/LemonLDAPNG/Apache-Session-LDAP 1 https://github.com/gitpan/PerlSpeak 1 https://github.com/josdejong/jsoneditor 1