Overview 117 matches · 1 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 12 public PoC · 1 EPSS ≥ 0.5
117matches
1in Waratek scope0.9%
0protected0.0%
1exploited0.9%
1CISA KEV0.9%
12public PoC10.3%
1EPSS ≥ 0.50.9%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
1
0.9%
Outside Waratek scope
2
1.7%
Not applicable
114
97.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
117
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 21 / year
20061
Not applicable1
High1
not blocked1
Working exploit published1
20072
Not applicable2
Medium2
not blocked2
Working exploit published2
20081
Not applicable1
High1
not blocked1
No public exploit1
20095
Not applicable5
High2
Medium3
not blocked5
Working exploit published4
No public exploit1
20103
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20111
Not applicable1
Low1
not blocked1
No public exploit1
20121
Not applicable1
Medium1
not blocked1
Working exploit published1
20130
20140
20157
Not applicable7
High5
Medium2
not blocked7
Working exploit published1
No public exploit6
20161
Not applicable1
Medium1
not blocked1
No public exploit1
20173
Not applicable3
Critical1
High1
Medium1
not blocked3
No public exploit3
20187
Not applicable7
High7
not blocked7
No public exploit7
201919
Outside Waratek scope1
Not applicable18
Critical4
High11
Medium4
not blocked19
Working exploit published1
No public exploit18
202021
Outside Waratek scope1
Not applicable20
Critical8
High8
Medium5
not blocked21
No public exploit21
202110
Not applicable10
High9
Medium1
not blocked10
No public exploit10
20226
Not applicable6
Critical1
High4
Medium1
not blocked6
Proof of concept only2
No public exploit4
20235
No exploit published1
Not applicable4
Critical2
High2
Medium1
not blocked5
Proof of concept only2
No public exploit3
20242
Not applicable2
Critical1
Medium1
not blocked2
Proof of concept only1
No public exploit1
20256
Not applicable6
High3
Medium3
not blocked6
Working exploit published1
No public exploit5
202616
Not applicable16
Critical1
High6
Medium8
Low1
not blocked16
Exploited1
Proof of concept only6
No public exploit9
20062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2015-3416 | High | 2015-04-24 | Not applicable | No public exploit | The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement. |
| CVE-2015-3415 | High | 2015-04-24 | Not applicable | No public exploit | The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement. |
| CVE-2015-3414 | High | 2015-04-24 | Not applicable | No public exploit | SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement. |
| CVE-2012-5105 | Medium | 2012-09-23 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to (1) main.php or (2) index.php; or (3) nsextt parameter to index.php. |
| CVE-2011-0995 | Low | 2011-05-13 | Not applicable | No public exploit | The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors. |
| CVE-2010-2096 | High | 2010-05-27 | Not applicable | No public exploit | Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter. |
| CVE-2010-2095 | High | 2010-05-27 | Not applicable | No public exploit | SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter. |
| CVE-2009-4539 | Medium | 2010-01-04 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter. |
| CVE-2008-6593 | High | 2009-04-03 | Not applicable | Working exploit published | SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php. |
| CVE-2008-6592 | High | 2009-04-03 | Not applicable | Working exploit published | thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache_dir parameter containing a %00 (encoded null byte). |
| CVE-2008-6590 | Medium | 2009-04-03 | Not applicable | Working exploit published | Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to (1) index.php and (2) LightNEasy.php. |
| CVE-2008-6589 | Medium | 2009-04-03 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) index.php and (2) LightNEasy.php. |
| CVE-2008-6435 | Medium | 2009-03-06 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) lang[home], (2) lang[admin_menu], and (3) lang[admin_menu_page_overview] parameters to cms/includes/header.inc.php; and the (4) lang[login_username] and (5) lang[login_password] parameters to cms/includes/login.inc.php. |
| CVE-2008-0516 | High | 2008-01-31 | Not applicable | No public exploit | PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2007-1232 | Medium | 2007-03-03 | Not applicable | Working exploit published | Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a SQLiteManager_currentTheme cookie. |
| CVE-2007-1231 | Medium | 2007-03-03 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) database name, (2) table name, (3) ViewName, (4) view, (5) trigger, and (6) function fields in main.php and certain other files. |
| CVE-2006-4102 | High | 2006-08-14 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the conf[classpath] parameter. |