VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 16 hours ago
Reset
More filters (1)
Columns
Oracle product: Oracle MySQL / MySQL Workbench (SQLite)✕
Overview 6 matches · 1 in RASP scope · 1 protected · 0 KEV · 1 public PoC · 2 CISA SSVC · 1 EPSS ≥ 0.5 · 0 disputed
6matches 1in RASP scope16.7% 1protected16.7% 0KEV0.0% 1public PoC16.7% 2CISA SSVC33.3% 1EPSS ≥ 0.516.7% 0disputed0.0%
Critical 2 33.3% High 2 33.3% Medium 2 33.3% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
Protected by RASP 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% No fix identified 0 0.0% Mitigated by environment configuration 1 16.7% Queued for review 0 0.0% Not applicable 4 66.7% Out of RASP scope 1 16.7% Rejected 0 0.0%
blocked by ARMR today 1 16.7% not blocked 5 83.3% not established 0 0.0% unrecorded 0 0.0%
Exploited in the wild 0 0.0% Working exploit published 1 16.7% Proof of concept only 1 16.7% Forecast only 0 0.0% No public exploit 4 66.7%
split by peak 3 / year
Unknown: 0None: 0Low: 0Medium: 2High: 2Critical: 2 Rejected: 0Out of RASP scope: 1Not applicable: 4Queued for review: 0Mitigated by environment configuration: 1No fix identified: 0No exploit published: 0Mitigation candidate: 0Rule in development: 0Protected by RASP: 0 unrecorded: 0not established: 0not blocked: 5blocked by ARMR today: 1 No public exploit: 4Forecast only: 0Proof of concept only: 1Working exploit published: 1Exploited in the wild: 0 2019: 3 CVEs 2020: 0 CVEs 2021: 1 CVE 2022: 1 CVE 2023: 0 CVEs 2024: 0 CVEs 2025: 1 CVE
2019202020212022202320242025
6 matches CSV JSON
CVE Severity Published▾ Status Exploitation Description
CVE-2025-6965 High 2025-07-15 Not applicable Working exploit published There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
CVE-2022-46908 High 2022-12-12 Not applicable Proof of concept only SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.
CVE-2021-20227 Medium 2021-03-23 Not applicable No public exploit A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.
CVE-2019-19646 Critical 2019-12-09 Out of RASP scope No public exploit pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
CVE-2019-16168 Medium 2019-09-09 Mitigated by environment configuration No public exploit In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
CVE-2019-8457 Critical 2019-05-30 Not applicable No public exploit SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.