CVE-2019-19242Published
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.
cve-program ·
Vendor product: n/a
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
695690 source statements · aliases may refer to the same vulnerabilityCVE-2019-18224Published
idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.
cve-program ·
Vendor product: n/a
CVE-2019-17595Published
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
cve-program ·
Vendor product: n/a
CVE-2019-17594Published
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
cve-program ·
Vendor product: n/a
CVE-2019-12900Published
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
cve-program ·
Vendor product: n/a
CVE-2019-10160Published
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-20…
cve-program ·
Vendor product: python
CVE-2019-9923Published
pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.
cve-program ·
Vendor product: n/a
CVE-2019-9674Published
Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.
cve-program ·
Vendor product: n/a
CVE-2019-8457Published
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
cve-program ·
Vendor product: SQLite
CVE-2019-5482Published
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
cve-program ·
Vendor product: curl
CVE-2019-5481Published
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
cve-program ·
Vendor product: curl
CVE-2019-5436Published
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
cve-program ·
Vendor product: curl
CVE-2019-5435Published
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
cve-program ·
Vendor product: curl
CVE-2019-5188Published
A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrup…
cve-program ·
Vendor product: E2fsprogs
CVE-2019-5094Published
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a …
cve-program ·
Vendor product: E2fsprogs
CVE-2019-5018Published
An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker…
cve-program ·
Vendor product: Sqlite3
CVE-2019-3863Published
A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is …
cve-program ·
Vendor product: libssh2
CVE-2019-3862Published
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial…
cve-program ·
Vendor product: libssh2
CVE-2019-3861Published
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of …
cve-program ·
Vendor product: libssh2
CVE-2019-3860Published
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client mem…
cve-program ·
Vendor product: libssh2
CVE-2019-3859Published
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in…
cve-program ·
Vendor product: libssh2
CVE-2019-3858Published
An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the …
cve-program ·
Vendor product: libssh2
CVE-2019-3857Published
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able…
cve-program ·
Vendor product: libssh2
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.