Most recent entries from all

4HZM000604 — ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (SQLite 3.2.4)

ABB is aware of public reports of vulnerabilities in a 3rd party dependency SQLite Version 3.2.4 which was delivered together with the installation package of Camera Connect Version 2.0.0.42 and below. An update is available that resolves a privately reported outdated 3rd party component with vulnerabilities in the product versions listed as affected in the advisory.

An attacker who successfully exploited any of these vulnerabilities in the 3rd party component could potentially compromise the system in different ways.

ALSA-2025:11803 — Important: nodejs:22 security update

Affected: AlmaLinux:8: nodejs, AlmaLinux:8: nodejs-devel, AlmaLinux:8: nodejs-docs, AlmaLinux:8: nodejs-full-i18n, AlmaLinux:8: nodejs-libs, AlmaLinux:8: nodejs-nodemon, AlmaLinux:8: nodejs-packaging, AlmaLinux:8: nodejs-packaging-bundler, AlmaLinux:8: npm, AlmaLinux:8: v8-12.4-devel

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

* sqlite: Integer Truncation in SQLite (CVE-2025-6965)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-08786

BELL-CVE-2025-6965

Affected: Alpaquita:23: sqlite, Alpaquita:25: sqlite, Alpaquita:stream: sqlite, BellSoft Hardened Containers:23: sqlite, BellSoft Hardened Containers:25: sqlite, BellSoft Hardened Containers:stream: sqlite

BIT-sqlite-2025-6965 — Integer Truncation on SQLite

Affected: Bitnami: sqlite

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

certfr-2025-avi-0740 — De multiples vulnérabilités ont été découvertes dans Tenable Security Center. Certaines d'entre elles permettent à un a…

certfr-2025-avi-0740

EUVD-2026-307093

fkie_cve-2025-6965

GHSA-2m69-gcr7-jv3q — SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

Affected: NuGet: SQLitePCLRaw.lib.e_sqlite3, NuGet: SQLitePCLRaw.lib.e_sqlite3.android, NuGet: SQLitePCLRaw.lib.e_sqlite3.ios

ICSA-26-071-03 — Siemens SIDIS Prime

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters. An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing. An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key. Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key. There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP…

msrc_CVE-2025-6965 — Integer Truncation on SQLite

msrc_CVE-2025-6965

NCSC-2026-0023 — Kwetsbaarheden verholpen in Oracle PeopleSoft

NCSC-2026-0023

OESA-2025-2160 — sqlite security update

Affected: openEuler:24.03-LTS-SP1: sqlite

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools. Security Fix(es):

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available, leading to a memory corruption issue.(CVE-2025-6965)

openSUSE-SU-2025:15368-1 — lemon-3.50.3-1.1 on GA media

lemon-3.50.3-1.1 on GA media

RHSA-2025:12036 — Red Hat Security Advisory: sqlite security update

sqlite: Integer Truncation in SQLite

SSA-225816 — SSA-225816: Memory Corruption Vulnerability in RUGGEDCOM CROSSBOW Station Access Controller Before V5.8

SUSE-SU-2025:02744-1 — Security update for sqlite3

Security update for sqlite3

UBUNTU-CVE-2025-6965

Affected: Ubuntu:Pro:14.04:LTS: sqlite3, Ubuntu:Pro:16.04:LTS: sqlite3, Ubuntu:Pro:18.04:LTS: sqlite3, Ubuntu:Pro:20.04:LTS: sqlite3, Ubuntu:22.04:LTS: sqlite3, Ubuntu:24.04:LTS: sqlite3, Ubuntu:25.10: sqlite3

WID-SEC-W-2025-1646 — Red Hat Enterprise Linux (nodejs, perl): Mehrere Schwachstellen

Ein lokaler oder entfernter authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen oder andere nicht spezifizierte Effekte zu verursachen.