SQLite

Every one of the 56 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Integer Truncation on SQLiteCVE-2025-6965SQLite · CVSS 7.2 · 73% likely

   CWE-197

2. SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.CVE-2019-8457Sqlite · 45% likely

   CWE-125

3. SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.CVE-2022-35737Sqlite · CVSS 7.5 · 24% likely

   CWE-129

4. SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.CVE-2019-19603Sqlite · 11% likely
5. SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.CVE-2019-19924Sqlite · 11% likely

   CWE-755

6. SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3…CVE-2018-20346Sqlite · 10% likely

   CWE-190

7. In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.CVE-2020-11656Sqlite · 8.7% likely

   CWE-416

8. multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists bec…CVE-2019-19926Sqlite · 8.0% likely

   CWE-476

9. In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.CVE-2018-8740Sqlite · 8.0% likely

   CWE-476

10. SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after…CVE-2018-20506Sqlite · 7.5% likely

    CWE-190

11. pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.CVE-2019-19646Sqlite · 7.4% likely

    CWE-754

12. exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definition…CVE-2019-19880Sqlite · 6.9% likely

    CWE-476

13. SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to…CVE-2018-20505Sqlite · 6.9% likely

    CWE-89

14. zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.CVE-2019-19925Sqlite · 6.8% likely

    CWE-434

15. flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer…CVE-2019-19923Sqlite · 6.8% likely

    CWE-476

16. lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly hav…CVE-2019-19317Sqlite · 4.7% likely

    CWE-681

17. SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.CVE-2020-13871Sqlite · 4.4% likely

    CWE-416

18. SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is misha…CVE-2020-11655Sqlite · 4.3% likely

    CWE-665

19. In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe divi…CVE-2019-16168Sqlite · CVSS 6.5 · 4.2% likely

    CWE-369

20. A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disp…CVE-2021-36690Sqlite · 3.9% likely
21. selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.CVE-2019-20218Sqlite · 3.7% likely

    CWE-755

22. In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.CVE-2020-9327Sqlite · 3.7% likely

    CWE-476

23. sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.CVE-2019-19244Sqlite · 3.6% likely
24. ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that…CVE-2019-19959Sqlite · 3.4% likely
25. SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.CVE-2019-19242Sqlite · 2.7% likely

    CWE-476

26. An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.CVE-2021-31239Sqlite · CVSS 7.5 · 2.4% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.