CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

23022 matches found

Cvelist•added 2025/10/06 12:00 a.m.•21 views

CVE-2025-56382

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

0.00239EPSS

SaveExploits0References2

SUSE CVE•added 2025/10/05 2:52 a.m.•12 views

SUSE CVE-2025-46818

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

8CVSS6.7AI score0.00727EPSS

SaveExploits0References18

Tenable Nessus•added 2025/10/04 12:00 a.m.•4 views

FreeBSD : redis,valkey -- Lua Use-After-Free may lead to remote code execution (17e85cae-a115-11f0-9446-f02f7497ecda)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17e85cae-a115-11f0-9446-f02f7497ecda advisory. redis reports: An authenticated user may use a specially crafted Lua script to manipulate the garbage...

9.9CVSS8.6AI score0.82294EPSS

SaveExploits14References3

Tenable Nessus•added 2025/10/04 12:00 a.m.•3 views

FreeBSD : redis,valkey -- Lua library commands may lead to integer overflow and potential RCE (f6b8de04-a116-11f0-9446-f02f7497ecda)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f6b8de04-a116-11f0-9446-f02f7497ecda advisory. redis reports: An authenticated user may use a specially crafted Lua script to cause an integer overflo...

8.8CVSS8.1AI score0.03828EPSS

SaveExploits1References3

OSV•added 2025/10/03 8:15 p.m.•13 views

AZL-68426 CVE-2025-49844 affecting package valkey for versions less than 8.0.6-1

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all...

9.9CVSS7.1AI score0.82294EPSS

SaveExploits14References1