Lucene search
+L

10 matches found

NVD
NVD
•added 2026/01/07 9:16 p.m.•16 views

CVE-2025-69255

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics...

6.9CVSS0.00329EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/01/07 8:34 p.m.•8 views

CVE-2025-69255 RustFS gRPC GetMetrics deserialization panic enables remote DoS

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics...

6.9CVSS6.6AI score0.00329EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/01/07 8:34 p.m.•37 views

CVE-2025-69255 RustFS gRPC GetMetrics deserialization panic enables remote DoS

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics...

6.9CVSS0.00329EPSS
SaveExploits1References2
OSV
OSV
•added 2026/01/07 8:34 p.m.•11 views

CVE-2025-69255 RustFS gRPC GetMetrics deserialization panic enables remote DoS

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics...

6.9CVSS6.8AI score
SaveExploits0References4
OSV
OSV
•added 2026/01/07 6:36 p.m.•12 views

GHSA-GW2X-Q739-QHCR RustFS gRPC GetMetrics deserialization panic enables remote DoS

Summary A malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics endpoint. Details - Vulnerable code: rustfs/src/storage/tonicservice.rs:1775-1782: - MetricType and...

6.9CVSS6.8AI score0.00329EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/01/07 12:00 a.m.•12 views

rustfs 安全漏洞

rustfs is a high-performance object storage system from the RustFS open source. A security vulnerability exists in rustfs versions 1.0.0-alpha.13 through 1.0.0-alpha.77, which stems from a deserialization failure when processing a malformed gRPC GetMetrics request, which could lead to a remote...

6.9CVSS6.5AI score0.00329EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•2 views

CVE-2025-69255: Improper Handling of Exceptional Conditions

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics...

6.9CVSS5.7AI score0.00329EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•13 views

PT-2026-1935

Name of the Vulnerable Software and Affected Versions RustFS versions 1.0.0-alpha.13 through 1.0.0-alpha.77 Description RustFS is a distributed object storage system built in Rust. A malformed gRPC GetMetrics request can cause the get metrics function to fail during deserialization of metric...

6.9CVSS6.8AI score0.00329EPSS
SaveExploits1References5
CNVD
CNVD
•added 2017/07/31 12:00 a.m.•15 views

IDERA Uptime Monitor SQL Injection Vulnerability

IDERA Uptime Monitor is a cross-platform server monitoring software from IDERA. The software provides a server performance, availability and other indicators to collect, summarize and generate reports and other functions. An SQL injection vulnerability exists in the...

9.8CVSS10AI score0.01466EPSS
SaveExploits3References1
OSV
OSV
•added 2017/07/20 4:29 a.m.•14 views

CVE-2017-11471

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...

9.8CVSS5.8AI score0.01466EPSS
SaveExploits3References1
Rows per page
Query Builder