| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
| url |
VCID-fugu-kpp4-yfew |
| vulnerability_id |
VCID-fugu-kpp4-yfew |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
| reference_url |
https://sqlite.org/releaselog/3_39_2.html |
| reference_id |
3_39_2.html |
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 2 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:53:26Z/ |
|
|
| url |
https://sqlite.org/releaselog/3_39_2.html |
|
| 11 |
| reference_url |
https://kb.cert.org/vuls/id/720344 |
| reference_id |
720344 |
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 2 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:53:26Z/ |
|
|
| url |
https://kb.cert.org/vuls/id/720344 |
|
| 12 |
|
| 13 |
| reference_url |
https://www.sqlite.org/cves.html |
| reference_id |
cves.html |
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 2 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:53:26Z/ |
|
|
| url |
https://www.sqlite.org/cves.html |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-35737, GHSA-jw36-hf63-69r9
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fugu-kpp4-yfew |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
| url |
VCID-pebv-3aab-b7fq |
| vulnerability_id |
VCID-pebv-3aab-b7fq |
| summary |
|
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-7104 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00129 |
| scoring_system |
epss |
| scoring_elements |
0.31895 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00129 |
| scoring_system |
epss |
| scoring_elements |
0.32077 |
| published_at |
2026-06-14T12:55:00Z |
|
| 2 |
| value |
0.00129 |
| scoring_system |
epss |
| scoring_elements |
0.32098 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00129 |
| scoring_system |
epss |
| scoring_elements |
0.32081 |
| published_at |
2026-06-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-7104 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://sqlite.org/src/info/0e4e7a05c4204b47 |
| reference_id |
0e4e7a05c4204b47 |
| reference_type |
|
| scores |
| 0 |
| value |
5.2 |
| scoring_system |
cvssv2 |
| scoring_elements |
AV:A/AC:L/Au:S/C:P/I:P/A:P |
|
| 1 |
| value |
5.5 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 2 |
| value |
5.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 3 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T15:36:04Z/ |
|
|
| url |
https://sqlite.org/src/info/0e4e7a05c4204b47 |
|
| 5 |
|
| 6 |
| reference_url |
https://sqlite.org/forum/forumpost/5bcbf4571c |
| reference_id |
5bcbf4571c |
| reference_type |
|
| scores |
| 0 |
| value |
5.2 |
| scoring_system |
cvssv2 |
| scoring_elements |
AV:A/AC:L/Au:S/C:P/I:P/A:P |
|
| 1 |
| value |
5.5 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 2 |
| value |
5.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 3 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T15:36:04Z/ |
|
|
| url |
https://sqlite.org/forum/forumpost/5bcbf4571c |
|
| 7 |
|
| 8 |
| reference_url |
https://vuldb.com/?ctiid.248999 |
| reference_id |
?ctiid.248999 |
| reference_type |
|
| scores |
| 0 |
| value |
5.2 |
| scoring_system |
cvssv2 |
| scoring_elements |
AV:A/AC:L/Au:S/C:P/I:P/A:P |
|
| 1 |
| value |
5.5 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 2 |
| value |
5.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 3 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T15:36:04Z/ |
|
|
| url |
https://vuldb.com/?ctiid.248999 |
|
| 9 |
|
| 10 |
| reference_url |
https://vuldb.com/?id.248999 |
| reference_id |
?id.248999 |
| reference_type |
|
| scores |
| 0 |
| value |
5.2 |
| scoring_system |
cvssv2 |
| scoring_elements |
AV:A/AC:L/Au:S/C:P/I:P/A:P |
|
| 1 |
| value |
5.5 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 2 |
| value |
5.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 3 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T15:36:04Z/ |
|
|
| url |
https://vuldb.com/?id.248999 |
|
| 11 |
| reference_url |
https://security.netapp.com/advisory/ntap-20240112-0008/ |
| reference_id |
ntap-20240112-0008 |
| reference_type |
|
| scores |
| 0 |
| value |
5.2 |
| scoring_system |
cvssv2 |
| scoring_elements |
AV:A/AC:L/Au:S/C:P/I:P/A:P |
|
| 1 |
| value |
5.5 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 2 |
| value |
5.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 3 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T15:36:04Z/ |
|
|
| url |
https://security.netapp.com/advisory/ntap-20240112-0008/ |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-7104
|
| risk_score |
3.3 |
| exploitability |
0.5 |
| weighted_severity |
6.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pebv-3aab-b7fq |
|
| 40 |
|
| 41 |
|
| 42 |
| url |
VCID-rxcj-ybgk-xqds |
| vulnerability_id |
VCID-rxcj-ybgk-xqds |
| summary |
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-15286 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00437 |
| scoring_system |
epss |
| scoring_elements |
0.63493 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00437 |
| scoring_system |
epss |
| scoring_elements |
0.63595 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00437 |
| scoring_system |
epss |
| scoring_elements |
0.63607 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00437 |
| scoring_system |
epss |
| scoring_elements |
0.63603 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-15286 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-15286
|
| risk_score |
1.5 |
| exploitability |
0.5 |
| weighted_severity |
3.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rxcj-ybgk-xqds |
|
| 43 |
| url |
VCID-s2u6-gz6c-qkbf |
| vulnerability_id |
VCID-s2u6-gz6c-qkbf |
| summary |
Multiple vulnerabilities have been found in SQLite, the worst of
which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-5827 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.04961 |
| scoring_system |
epss |
| scoring_elements |
0.89891 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.04961 |
| scoring_system |
epss |
| scoring_elements |
0.89924 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.04961 |
| scoring_system |
epss |
| scoring_elements |
0.89931 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.04961 |
| scoring_system |
epss |
| scoring_elements |
0.89929 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-5827 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
| 49 |
|
| 50 |
|
| 51 |
|
| 52 |
|
| 53 |
|
| 54 |
|
| 55 |
|
| 56 |
|
| 57 |
|
| 58 |
|
| 59 |
|
| 60 |
|
| 61 |
|
| 62 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-5827
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-s2u6-gz6c-qkbf |
|
| 44 |
| url |
VCID-tsuk-btpm-93cq |
| vulnerability_id |
VCID-tsuk-btpm-93cq |
| summary |
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SQL statement. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-2513 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.02496 |
| scoring_system |
epss |
| scoring_elements |
0.85645 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.02496 |
| scoring_system |
epss |
| scoring_elements |
0.85696 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.02496 |
| scoring_system |
epss |
| scoring_elements |
0.85706 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.02496 |
| scoring_system |
epss |
| scoring_elements |
0.85699 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-2513 |
|
| 1 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-2513
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tsuk-btpm-93cq |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
| 49 |
| url |
VCID-vg3z-5avb-sfg7 |
| vulnerability_id |
VCID-vg3z-5avb-sfg7 |
| summary |
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted SQL statement. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2017-2520
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vg3z-5avb-sfg7 |
|
| 50 |
|
| 51 |
|
| 52 |
| url |
VCID-wgjq-pnkb-wfbu |
| vulnerability_id |
VCID-wgjq-pnkb-wfbu |
| summary |
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SQL statement. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-2519 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.09633 |
| scoring_system |
epss |
| scoring_elements |
0.93065 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.09633 |
| scoring_system |
epss |
| scoring_elements |
0.93088 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.09633 |
| scoring_system |
epss |
| scoring_elements |
0.9309 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.09633 |
| scoring_system |
epss |
| scoring_elements |
0.93089 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-2519 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-2519
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wgjq-pnkb-wfbu |
|
| 53 |
|
| 54 |
|
| 55 |
|
| 56 |
|
| 57 |
| url |
VCID-zhk6-655d-pbfc |
| vulnerability_id |
VCID-zhk6-655d-pbfc |
| summary |
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being misinterpreted as command line options. Fixed on or around 2025-12-26. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-71316 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0006 |
| scoring_system |
epss |
| scoring_elements |
0.19324 |
| published_at |
2026-06-12T12:55:00Z |
|
| 1 |
| value |
0.0006 |
| scoring_system |
epss |
| scoring_elements |
0.19322 |
| published_at |
2026-06-14T12:55:00Z |
|
| 2 |
| value |
0.0006 |
| scoring_system |
epss |
| scoring_elements |
0.19344 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.0006 |
| scoring_system |
epss |
| scoring_elements |
0.19156 |
| published_at |
2026-06-11T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-71316 |
|
| 1 |
| reference_url |
https://www.cve.org/CVERecord?id=CVE-2025-71316 |
| reference_id |
CVERecord?id=CVE-2025-71316 |
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.2 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-06-05T03:55:53Z/ |
|
| 3 |
| value |
Track* |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-06-04T19:14:02Z/ |
|
|
| url |
https://www.cve.org/CVERecord?id=CVE-2025-71316 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
https://sqlite.org/src/file/tool/winmain.c |
| reference_id |
winmain.c |
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.2 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-06-05T03:55:53Z/ |
|
| 3 |
| value |
Track* |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-06-04T19:14:02Z/ |
|
|
| url |
https://sqlite.org/src/file/tool/winmain.c |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-71316
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zhk6-655d-pbfc |
|
| 58 |
|