42 matches found
Unity Linux 20.1070e Security Update: redis6 (UTSA-2026-017799)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017799 advisory. Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debuggers...
Unity Linux 20.1060e / 20.1070e Security Update: redis (UTSA-2026-017593)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017593 advisory. Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debuggers...
CVE-2024-1930 affecting package dnf5 for versions less than 5.0.14-3
CVE-2024-1930 affecting package dnf5 for versions less than 5.0.14-3. A patched version of the package is available...
Linux Distros Unpatched Vulnerability : CVE-2024-8207
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a...
Linux Distros Unpatched Vulnerability : CVE-2019-15216
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c...
WordPress Download Monitor Plugin <= 5.0.13 is vulnerable to Broken Access Control
Software Download Monitor Type Plugin Vulnerable versions = 5.0.13 Fixed in 5.0.14 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10399 Patch priority Low CVSS severity Low 4.3 Developer WPChill PSID 4c314a68f652 Credits Trương Hữu Phúc truonghuuphuc...
MongoDB Server Library Local Privilege Escalation Vulnerability (SERVER-69507) - Linux
MongoDB is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb";...
BIT-VALKEY-2021-32627 Integer overflow issue with Streams in Redis
Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and...
BIT-VALKEY-2021-32672 Vulnerability in Lua Debugger in Redis
Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or newer...
BIT-VALKEY-2021-32675 DoS vulnerability in Redis
Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol RESP request, Redis allocates memory according to user-specified values which determine the number of elements in the multi-bulk header and size of each element in the bulk header. ...
BIT-KEYDB-2021-32628 Vulnerability in handling large ziplists
Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves modifying the default ziplist...
BIT-REDIS-2021-32626 Lua scripts can overflow the heap-based Lua stack in Redis
Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote co...
BIT-REDIS-2021-32687 Integer overflow issue with intsets in Redis
Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap and potentially be used to leak arbitrary contents of the heap or trigger remote code execution. The vulnerability involves changing the...
Debian: Security Advisory (DLA-3361-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-4572 · Mongodb · Mongodb Server +1
Name of the Vulnerable Software and Affected Versions: MongoDB Server versions 4.4 through 6.3 MongoDB Server versions 5.0.0 through 5.0.14 Description: The issue is related to incorrect client certificate validation when the MongoDB Server is configured to use TLS with specific configuration...
SUSE CVE-2016-0592
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via unknown vectors related to Core...
Denial of Service (DoS)
Overview Microsoft.AspNetCore.App.Runtime.linux-musl-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS when the Kestrel web serve...
.NET 5.0 security and bugfix update
An update for .NET 5.0 is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
RLSA-2022:0495 Important: .NET 5.0 security and bugfix update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 5.0.211 and .NET Runtime 5.0.14...
[SECURITY] [DSA 4985-1] wordpress security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4985-1 [email protected] https://www.debian.org/security/ Sebastien Delafond October 14, 2021 https://www.debian.org/security/faq -...