Lucene search
+L

5477 matches found

OSV
OSV
added 2022/02/18 8:15 p.m.17 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS9.9AI score
SaveExploits0References7
NVD
NVD
added 2022/02/18 8:15 p.m.28 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS0.99351EPSS
SaveExploits11References7
Prion
Prion
added 2022/02/18 8:15 p.m.33 views

Remote code execution

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS9.7AI score0.99351EPSS
SaveExploits11References6
UbuntuCve
UbuntuCve
added 2022/02/18 8:15 p.m.78 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS7.5AI score0.99351EPSS
SaveExploits11References3
OSV
OSV
added 2022/02/18 8:15 p.m.13 views

UBUNTU-CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS7.6AI score0.99351EPSS
SaveExploits11References4
CVE
CVE
added 2022/02/18 7:25 p.m.1773 views

CVE-2022-0543

CVE-2022-0543 concerns Redis with a Debian-specific Lua sandbox escape packaging issue that can lead to remote code execution. The vulnerability is described as a Debian packaging problem in Redis, enabling a sandbox escape and potential arbitrary code execution on affected systems. Public adviso...

10CVSS9.7AI score0.99351EPSS
SaveIn wildExploits11References7Affected Software1
Vulnrichment
Vulnrichment
added 2022/02/18 7:25 p.m.17 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

9.9AI score0.99351EPSS
SaveExploits11References6
Debian CVE
Debian CVE
added 2022/02/18 7:25 p.m.83 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS9.2AI score0.99351EPSS
SaveExploits11
Cvelist
Cvelist
added 2022/02/18 7:25 p.m.48 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

9.9AI score0.99351EPSS
SaveExploits11References6
Debian
Debian
added 2022/02/18 7:05 p.m.50 views

[SECURITY] [DSA 5081-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5081-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 18, 2022 https://www.debian.org/security/faq -...

10CVSS9.8AI score0.99351EPSS
SaveExploits11
Metasploit
Metasploit
added 2022/02/18 12:00 a.m.484 views

Redis Lua Sandbox Escape

This module exploits CVE-2022-0543, a Lua-based Redis sandbox escape. The vulnerability was introduced by Debian and Ubuntu Redis packages that insufficiently sanitized the Lua environment. The maintainers failed to disable the package interface, allowing attackers to load arbitrary libraries. On...

10CVSS8.7AI score0.99351EPSS
SaveExploits11
ATTACKERKB
ATTACKERKB
added 2022/02/18 12:00 a.m.111 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution. Recent assessments: NinjaOperator at March 25, 2022 8:04pm UTC reported: Muhstik Gang has been seen exploiting...

10CVSS9.7AI score0.99351EPSS
SaveIn wildExploits11References7
Positive Technologies
Positive Technologies
added 2022/02/18 12:00 a.m.10 views

PT-2022-1643

Name of the Vulnerable Software and Affected Versions Redis versions prior to the fixed version Debian-specific Redis Server affected versions not specified Description A Lua sandbox escape vulnerability in Redis could result in remote code execution. The issue is related to a packaging problem a...

10CVSS7.7AI score0.99351EPSS
SaveExploits11References69
OSV
OSV
added 2022/02/18 12:00 a.m.40 views

DSA-5081-1 redis - security update

Bulletin has no description...

10CVSS9.6AI score0.99351EPSS
SaveExploits11
CNNVD
CNNVD
added 2022/02/18 12:00 a.m.3 views

Redis 代码注入漏洞

Redis Labs Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis Labs, Inc. that provides APIs in multiple languages. A code injection vulnerability exists in Redis, which can be exploited by an attacker to remotely...

10CVSS8.5AI score0.99351EPSS
SaveExploits11References14
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:00 a.m.49 views

Rocky Linux 8 : redis:6 (RLSA-2021:2034)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:2034 advisory. - Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6...

8.8CVSS8AI score0.04028EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:00 a.m.12 views

The vulnerability of the Controller.class.php file on the high-performance PHP Workman server platform allows attackers to execute cross-site scripting attacks against Redis database management systems.

The vulnerability of the Controller.class.php file on the high-performance PHP Workman socket service platform is related to the lack of security measures for the web page structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

6.1CVSS6.2AI score0.00641EPSS
SaveExploits1References2Affected Software1
Gitee
Gitee
added 2022/01/30 10:53 a.m.6 views

redis-rce

PoC exploit for Redis RCE Remote Code Execution in Redis 4.x/5.x. The exploit is inspired by Redis post-exploitation techniques and is based on a modified version of the Redis Rogue Server. The exploit uses the RedisModules-ExecuteCommand library to load a custom Redis module, which allows for...

8.4AI score
SaveExploits0
Fedora
Fedora
added 2022/01/30 1:44 a.m.38 views

[SECURITY] Fedora 35 Update: hiredis-0.13.3-17.fc35

Hiredis is a minimalistic C client library for the Redis database...

8.8CVSS1.3AI score0.02139EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.35 views

Mageia: Security Advisory (MGASA-2021-0483)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS7.4AI score0.16904EPSS
SaveExploits0References5
Rows per page
Query Builder