Browse CVEs

HIGH 7.5 CVE-2026-51304 sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprLi… SQLite No fix yet Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-51302 SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temp… SQLite No fix yet Fix from $1,9502026-07-27 MEDIUM 6.2 CVE-2026-51298 sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree(), the program… SQLite No fix yet Fix from $1,6002026-07-27 HIGH 8.8 CVE-2026-51297 sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free … SQLite Mitigation only Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-51296 SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575… SQLite No fix yet Fix from $1,9502026-07-27 HIGH 8.1 CVE-2019-5018EPSS 7% An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause … SQLite No fix yet Fix from $1,9502019-05-10 HIGH 7.5 CVE-2017-15286 SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQL… SQLite No fix yet Fix from $1,9502017-10-12 MEDIUM 5.5 CVE-2017-13685 The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted… SQLite Mitigation only Fix from $1,6002017-08-29 HIGH 7.5 CVE-2008-6592 thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename,… SQLite No fix yet Fix from $1,9502009-04-03 HIGH 7.5 CVE-2008-6593 SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code … SQLite No fix yet Fix from $1,9502009-04-03 MEDIUM 5.0 CVE-2008-6590 Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote at… SQLite No fix yet Fix from $1,6002009-04-03