Lucene search
+L

3200 matches found

OSV
OSV
added 2021/02/26 10:15 p.m.7 views

AZL-6843 CVE-2021-21309 affecting package redis for versions less than 5.0.5-7

Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 or newer uses a configurable limit for...

8.8CVSS7.3AI score0.047EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/26 10:15 p.m.36 views

CVE-2021-21309

Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 or newer uses a configurable limit for...

8.8CVSS2.2AI score
SaveExploits0References4
Prion
Prion
added 2021/02/26 10:15 p.m.26 views

Integer overflow

Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 or newer uses a configurable limit for...

6.5CVSS9AI score0.047EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/26 10:15 p.m.5 views

CVE-2021-21309

Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 or newer uses a configurable limit for...

8.8CVSS6.5AI score0.047EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2021/02/26 9:50 p.m.24 views

CVE-2021-21309 Integer overflow on 32-bit systems

Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 or newer uses a configurable limit for...

5.4CVSS9.3AI score0.047EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2021/02/26 9:50 p.m.33 views

CVE-2021-21309

Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 or newer uses a configurable limit for...

8.8CVSS9.2AI score0.047EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/02/26 9:50 p.m.62 views

CVE-2021-21309

Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 or newer uses a configurable limit for...

8.8CVSS7.7AI score0.047EPSS
SaveExploits0
Veracode
Veracode
added 2021/02/26 2:11 a.m.27 views

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists through the syscall implementation on 32-bit systems...

5.5CVSS1.6AI score0.011EPSS
SaveExploits1References2Affected Software3
RedhatCVE
RedhatCVE
added 2021/02/25 6:35 p.m.39 views

CVE-2020-28588

A flaw read uninitialized values in the Linux kernel syscall implementation on 32 bit-systems was found in the way user reading /proc/self/syscall. A local user could use this flaw to read three 64 bits uninitialized values, but cannot control which values. The highest threat from this...

5.5CVSS0.8AI score0.011EPSS
SaveExploits1References4
FreeBSD
FreeBSD
added 2021/02/22 12:0 a.m.29 views

redis -- Integer overflow on 32-bit systems

Redis Development team reports: Redis 4.0 or newer uses a configurable limit for the maximum supported bulk input size. By default, it is 512MB which is a safe value for all platforms. If the limit is significantly increased, receiving a large request from a client may trigger several integer...

8.8CVSS1.2AI score0.047EPSS
SaveExploits0
NVD
NVD
added 2021/02/15 7:15 p.m.31 views

CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

7.5CVSS0.03253EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/02/15 7:15 p.m.3 views

CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

7.5CVSS7.3AI score0.03253EPSS
SaveExploits0References5
OSV
OSV
added 2021/02/15 7:15 p.m.40 views

UBUNTU-CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

7.5CVSS5.8AI score0.03253EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/02/15 6:40 p.m.38 views

CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

7.6AI score0.03253EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2021/02/15 6:40 p.m.85 views

CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

7.5CVSS7.5AI score0.03253EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/02/15 4:27 p.m.37 views

CVE-2021-27219

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...

7.5CVSS8AI score0.02993EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/02/15 12:0 a.m.8 views

PT-2021-17326

Name of the Vulnerable Software and Affected Versions: steghide version 0.5.1 Description: The issue relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data. Recommendations: For steghide version 0.5.1, at the moment, there is no information about a newer...

7.5CVSS7.3AI score0.03253EPSS
SaveExploits0References13
OpenVAS
OpenVAS
added 2021/02/10 12:0 a.m.38 views

Microsoft Windows Multiple Vulnerabilities (KB4601319)

This host is missing a critical security update according to Microsoft KB4601319 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.77762EPSS
SaveExploits29References3
CNNVD
CNNVD
added 2021/02/09 12:0 a.m.9 views

Microsoft Excel Resource Management Error Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Excel. The following products and editions are affected:Microsoft Office Web Apps Server 2013 Service Pack 1,Office Online...

7.8CVSS7.1AI score0.02321EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/02/09 12:0 a.m.13 views

Microsoft Excel Security Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Excel. The following products and versions are affected: Microsoft Office Web Apps Server 2013 Service Pack 1,Microsoft Excel 2010 Service Pack 2...

7.8CVSS7.1AI score0.02321EPSS
SaveExploits0References4
Rows per page
Query Builder