16 matches found
CVE-2026-25589
RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...
redis-8.6.3-1.1 on GA media (moderate)
redis-8.6.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10711-1 Rating: moderate Cross-References: CVE-2026-23479 CVE-2026-23631 CVE-2026-25243 CVE-2026-25588 CVE-2026-25589 CVSS scores: CVE-2026-23479 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-23479 SUSE : 7.7...
CVE-2026-25589
creationtimestamp| type| source ---|---|--- 2026-05-07 05:34:51+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-redis 2026-05-07 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/redis-products-multiple-vulnerabilities20260508 2026-05-08 04:00:04+00:00|...
SUSE CVE-2026-25589
RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...
UBUNTU-CVE-2026-25589
RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...
CVE-2026-25589
RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...
CVE-2026-25589
RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...
CVE-2019-25589
creationtimestamp| type| source ---|---|--- 2026-03-22 04:30:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhmplbwmsf2o...
CVE-2019-25589
ZOC Terminal 7.23.4 contains a buffer overflow vulnerability in the Shell field of Program Settings that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a crafted payload into the Shell configuration field and trigger a crash when...
CVE-2025-25589
creationtimestamp| type| source ---|---|--- 2025-03-18 17:44:03+00:00| seen| https://t.me/cvedetector/20570 2025-03-18 20:18:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihykwyv26 2025-03-21 14:19:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8...
CVE-2025-25589
An XML external entity XXE injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file...
CVE-2025-25589
An XML external entity XXE injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file...
buildah security update
runc 1:1.1.4-1.0.1 - rootless: fix /sys/fs/cgroup mounts to prevent CVE-2023-25809 - rootfs: prohibit symlinks that conflicts with readonlyPaths and/or maskedPaths to prevent CVE-2023-27561 - Prohibit /proc and /sys to be symlinks to prevent CVE-2023-28642 - JIRA: OLDIS-25589...
CVE-2023-25589 Unauthenticated Arbitrary User Creation Leads to Complete System Compromise
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise...
