Yeah, of the browser or plugin. SQLite is neither although does have a local exploit.