5482 matches found
Deserialization of untrusted data
In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code execute...
CVE-2021-31649
In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code execute...
CVE-2021-31649
CVE-2021-31649 concerns a deserialization vulnerability in applications using JFinal 4.9.08 and below when Redis is involved. The Red Hat/OSV/CNVD/CNVD-like and CVE family references in the connected set describe a potential for remote code execution due to insecure deserialization in the JFinal ...
CVE-2021-31649
In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code execute...
JFinal 代码问题漏洞
JFinal is a Java-based language WEB ORM open source framework. A processing logic error vulnerability exists in jfinal, which originates in jfinal version 4.9.08 and below in applications that use redis, and can be exploited by an attacker to potentially cause remote code execution...
Important Photon OS Security Update - PHSA-2021-4.0-0050
Updates of 'redis' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2021-0050
Updates of 'redis' packages of Photon OS have been released...
Fedora: Security Advisory for redis (FEDORA-2021-0ad4bec5b1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for redis (FEDORA-2021-916f861096)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Metasploit Wrap-Up
NSClient++ Community contributor Yann Castel has contributed an exploit module for NSClient++ which targets an authenticated command execution vulnerability. Users that are able to authenticate to the service as admin can leverage the external scripts feature to execute commands with SYSTEM level...
[SECURITY] Fedora 33 Update: redis-6.0.14-1.fc33
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...
[SECURITY] Fedora 34 Update: redis-6.2.4-1.fc34
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...
SUSE: Security Advisory (SUSE-SU-2021:1652-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: IBM DataPower Gateway is potentially vulnerable to a Denial of Service (CVE-2020-14147)
Summary IBM has addressed CVE-2020-14147 Vulnerability Details CVEID: CVE-2020-14147 DESCRIPTION: Redis is vulnerable to a denial of service, caused by an integer overflow in the getnum function in luastruct.c in Redis. By sending a specially crafted command with a large number, a remote attacker...
openSUSE Security Update : redis (openSUSE-2021-841)
This update for redis fixes the following issues : redis was updated to 6.0.14 : - CVE-2021-32625: An integer overflow bug could be exploited by using the STRALGO LCS command to cause remote remote code execution boo1186722 - Fix crash in UNLINK on a stream key with deleted consumer groups -...
openSUSE: Security Advisory for redis (openSUSE-SU-2021:0841-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Remote Code Execution
Redis is vulnerable to remote code execution. An integer overflow bug allows an attacker to execute arbitrary code using the STRALGO LCS command to corrupt the heap...
OPENSUSE-SU-2021:0841-1 Security update for redis
This update for redis fixes the following issues: redis was updated to 6.0.14: CVE-2021-32625: An integer overflow bug could be exploited by using the STRALGO LCS command to cause remote remote code execution boo1186722 Fix crash in UNLINK on a stream key with deleted consumer groups SINTERSTORE:...
Security update for redis (moderate)
openSUSE Security Update: Security update for redis Announcement ID: openSUSE-SU-2021:0841-1 Rating: moderate References: 1186722 Cross-References: CVE-2021-32625 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for redis fixe...
Security Bulletin: Redis vulnerabilites impacting Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.0 and earlier (CVE-2021-29477, CVE-2021-29478)
Summary The Redis vulnerabilities CVE-2021-29477 and CVE-2021-29478 impacts Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.0.0 and earlier. The fix is delivered in Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.1.0. Vulnerability Details...