Lucene search
+L

202 matches found

OSV
OSV
added 2024/03/06 10:55 a.m.30 views

BIT-LUA-2021-44964

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

6.3CVSS6.6AI score0.00985EPSS
SaveExploits1References6
OSV
OSV
added 2024/03/06 10:55 a.m.19 views

BIT-LUA-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.5AI score0.01418EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:00 a.m.21 views

EulerOS Virtualization 2.11.1 : lua (EulerOS-SA-2023-2732)

According to the versions of the lua package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read. CVE-2021-45985 Note that Tenab...

7.5CVSS7.6AI score0.01418EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/06/26 12:00 a.m.15 views

PT-2023-22069 · WordPress · Relywp Coupon Affiliates – Woocommerce Affiliate Plugin

Name of the Vulnerable Software and Affected Versions: RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin versions = 5.4.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/04/11 1:55 a.m.10 views

SUSE CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS9.3AI score0.01418EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/10 9:15 a.m.15 views

AZL-35066 CVE-2021-45985 affecting package ntopng for versions less than 5.2.1-2

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.2AI score0.01418EPSS
SaveExploits1References1
OSV
OSV
added 2023/04/10 9:15 a.m.26 views

CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.8AI score
SaveExploits0References3
OSV
OSV
added 2023/04/10 9:15 a.m.11 views

DEBIAN-CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.5AI score0.01418EPSS
SaveExploits1References1
NVD
NVD
added 2023/04/10 9:15 a.m.17 views

CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.6AI score0.01418EPSS
SaveExploits1References3
Prion
Prion
added 2023/04/10 9:15 a.m.26 views

Heap overflow

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

5CVSS7.5AI score0.01418EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/04/10 12:00 a.m.9 views

Lua 缓冲区错误漏洞

Lua is a lightweight, extensible open source scripting language from the LUA team. A security vulnerability exists in Lua version 5.4.3, which stems from a faulty terminator during a tail call that can lead to an over-read of a heap-based buffer...

7.5CVSS7.4AI score0.01418EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2023/04/10 12:00 a.m.30 views

CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.2AI score0.01418EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/04/10 12:00 a.m.24 views

CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.8AI score0.01418EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2023/04/10 12:00 a.m.31 views

CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.6AI score0.01418EPSS
SaveExploits1
Patchstack
Patchstack
added 2023/03/31 12:00 a.m.18 views

WordPress Coupon Affiliates Plugin <= 5.4.3 is vulnerable to Cross Site Scripting (XSS)

Software Coupon Affiliates Type Plugin Vulnerable versions = 5.4.3 Fixed in 5.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28992 Patch priority Medium CVSS severity Medium 7.1 Developer RelyWP PSID 3cc060340a7c Credits thiennv Required privile...

7.1CVSS5.9AI score0.00382EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:22 a.m.6 views

SUSE CVE-2022-44793

handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...

6.5CVSS7.5AI score0.5346EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2022/12/12 12:00 a.m.11 views

WordPress plugin Jetpack CRM 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

4.8CVSS5AI score0.0047EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/09/14 12:00 a.m.10 views

Project Wonder 跨站脚本漏洞

Project Wonder is an open source collection of reusable WebObjects frameworks, applications and extensions open sourced by the WOCommunity Association. A security vulnerability exists in Project Wonder versions 1.0 through 5.4.3 that stems from vulnerability to arbitrary HTTP header injection and...

6.1CVSS6.4AI score0.00566EPSS
SaveExploits1References3
CBLMariner
CBLMariner
added 2022/08/03 9:14 p.m.23 views

CVE-2022-33099 affecting package lua for versions less than 5.4.3-4

CVE-2022-33099 affecting package lua for versions less than 5.4.3-4. A patched version of the package is available...

7.5CVSS7.7AI score0.02685EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2022/05/14 1:39 a.m.23 views

Shopware SQL Injection

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...

8.8CVSS7.8AI score0.00977EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder