93 matches found
redis: Lua library commands may lead to integer overflow and potential RCE
An integer overflow present in the Redis Lua scripting engine that allows an authenticated client to submit a specially crafted Lua script for example via EVAL/EVALSHA that can trigger memory corruption and potentially lead to remote code execution within the Redis server process...
redis: Lua library commands may lead to integer overflow and potential RCE
An integer overflow present in the Redis Lua scripting engine that allows an authenticated client to submit a specially crafted Lua script for example via EVAL/EVALSHA that can trigger memory corruption and potentially lead to remote code execution within the Redis server process...
EUVD-2024-27061
Malicious code in bioql PyPI...
EUVD-2025-21700
Malicious code in bioql PyPI...
EUVD-2023-34096
Malicious code in bioql PyPI...
EUVD-2022-2333
Malicious code in bioql PyPI...
Astra Linux – Vulnerability in OpenVPN
In OpenVPN versions 2.6.0 through 2.6.10, when the server role is used, it accepts multiple exit notifications from authenticated clients, which extends the validity of a closing session...
CVE-2025-37104
A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...
CVE-2025-37104
A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...
CVE-2025-37104 HPE Telco Service Orchestrator Software, Authenticated SQL Injection
A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...
CVE-2025-37104
The CVE concerns HPE Telco Service Orchestrator. It describes an authenticated SQL Injection vulnerability in service requests that could allow exfiltration of the database vendor name to authorized authenticated clients. Affected software is HPE Telco Service Orchestrator; the specific vulnerabl...
PT-2025-29828 · Hewlett Packard · Hpe Telco Service Orchestrator
Name of the Vulnerable Software and Affected Versions: HPE Telco Service Orchestrator affected versions not specified Description: A security issue exists in HPE Telco Service Orchestrator software that could allow authenticated clients to perform a SQL Injection attack when sending a service...
CVE-2023-2622
Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call RPC of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read...
CVE-2023-2625
A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user...
Important: Red Hat Security Advisory: redis security update
An update for redis is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
PT-2025-5605 · Org.Gaul · 3Proxy
Name of the Vulnerable Software and Affected Versions: org.gaul S3Proxy versions prior to 2.6.0 Description: The issue affects users of the filesystem and filesystem-nio2 storage backends, potentially exposing local files to authenticated clients. This could lead to unauthorized access to sensiti...
CVE-2024-46874
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credentials to send messages to some topics. Attackers with device credentials could issue commands to other devices on behalf of Ruijie's cloud...
Security update for openvpn
This update for openvpn fixes the following issues: CVE-2024-28882: Fix multiple exit notifications from authenticated clients will extend the validity of a closing session bsc1227546 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for openvpn
This update for openvpn fixes the following issues: CVE-2024-28882: Fix multiple exit notifications from authenticated clients will extend the validity of a closing session bsc1227546 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
