Lucene search
K

48 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.4 views

The vulnerability of the Jackson-databind library in the FasterXML project, related to the restoration of unreliable data in memory, allows a attacker to cause a service failure.

The vulnerability of the Jackson-databind library in the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.5AI score0.02656EPSS
Exploits1References14Affected Software8
OpenVAS
OpenVAS
added 2023/03/31 12:0 a.m.17 views

Fedora: Security Advisory for redis (FEDORA-2023-86068d1187)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.54978EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/01/03 12:0 a.m.4 views

The vulnerability of the library for serializing and deserializing YAML documents in SnakeYAML, related to the restoration of the unreliable data structure in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the library for serializing and deserializing YAML documents in SnakeYAML is related to the restoration of a unreliable data structure in memory. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

10CVSS7.4AI score0.99615EPSS
Exploits7References6Affected Software6
OSV
OSV
added 2022/11/15 6:15 a.m.26 views

RLSA-2022:8096 Low: redis security and bug fix update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

3.9CVSS6.9AI score0.02189EPSS
Exploits2References4
Rockylinux
Rockylinux
added 2022/11/15 6:15 a.m.61 views

redis security and bug fix update

An update is available for redis. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Redis is an advanced key-value store. It is often referred to as a data-structu...

7.8CVSS7.3AI score0.02189EPSS
Exploits2
AlmaLinux
AlmaLinux
added 2022/11/15 12:0 a.m.52 views

Low: redis security and bug fix update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

7.8CVSS7.3AI score0.02189EPSS
Exploits2References6
Rockylinux
Rockylinux
added 2022/11/08 6:22 a.m.44 views

redis:6 security, bug fix, and enhancement update

An update is available for redis. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Redis is an advanced key-value store. It is often referred to as a data-structu...

7.8CVSS7.5AI score0.02189EPSS
Exploits2
AlmaLinux
AlmaLinux
added 2022/11/08 12:0 a.m.119 views

Low: redis:6 security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

7.8CVSS7.5AI score0.02189EPSS
Exploits2References6
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.4 views

The vulnerability of the JMX data management platform of Apache Geode allows an attacker to execute arbitrary code.

The vulnerability of the JMX data management platform of Apache Geode involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.01228EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/25 12:0 a.m.5 views

The vulnerability of the software responsible for creating, monitoring, and orchestrating data processing scripts in Airflow lies in its ability to restore unreliable data structures in memory, allowing an attacker to execute arbitrary code or cause service failures.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

10CVSS8.2AI score0.07225EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.5 views

The vulnerability of the Hazelcast platform, a software product for data processing, in the Atlassian Bitbucket Data Center allows a perpetrator to execute arbitrary code.

The vulnerability of the Hazelcast platform, a software product for data processing, in the Atlassian/Bitbucket Data Center environment, relates to the restoration of unreliable data in memory. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

10CVSS7.8AI score0.71391EPSS
Exploits4References5Affected Software1
AlmaLinux
AlmaLinux
added 2021/10/19 1:14 p.m.35 views

Important: redis:5 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

8.8CVSS8.6AI score0.1578EPSS
Exploits0References7
CNNVD
CNNVD
added 2021/07/12 12:0 a.m.5 views

IBM Cloud Pak for Applications 信息泄露漏洞

IBM Cloud Pak for Applications is an application from IBM Corporation. An information disclosure vulnerability exists in IBM Cloud Pak for Applications, which stems from the fact that the system does not effectively restrict access to in-memory data, which could be exploited by an attacker to gai...

7.5CVSS5.6AI score0.0125EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/06/04 12:0 a.m.6 views

The vulnerability of the org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource component in the Jackson-databind library of the FasterXML project allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability may allow an attacker to compromise the...

9.3CVSS7.1AI score0.05218EPSS
Exploits1References9Affected Software6
AlmaLinux
AlmaLinux
added 2021/05/19 7:13 a.m.56 views

Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

6.5CVSS1.1AI score0.04028EPSS
Exploits0References1
Prion
Prion
added 2021/05/17 5:15 p.m.17 views

Design/Logic Flaw

IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server. IBM X-Force ID: 186401...

6.4CVSS9AI score0.02508EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.5 views

The vulnerability of the PHP framework Yii, related to the restoration of unreliable data structures in memory, allows attackers to execute arbitrary code.

The vulnerability of the PHP framework Yii is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

10CVSS8.1AI score0.78759EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:0 a.m.3 views

The vulnerability of the Log4j Java logging library, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Log4j logging library in Java programs involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.7AI score0.6906EPSS
Exploits3References6Affected Software12
Positive Technologies
Positive Technologies
added 2020/04/08 12:0 a.m.2 views

PT-2020-20310 · Intuit · Argo Api

Name of the Vulnerable Software and Affected Versions: Argo API version 1.5.0 Description: The Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures, allowing attackers to submit an unlimited number of authentication attemp...

9.8CVSS7.9AI score0.02157EPSS
Exploits2References28
CNVD
CNVD
added 2020/01/15 12:0 a.m.3 views

Unspecified Vulnerability in Oracle Coherence

Oracle Fusion Middleware, the digital business platform for enterprise and cloud computing, is a comprehensive family of middleware products that enable organizations to create and run agile, intelligent business applications and maximize IT efficiency by leveraging modern hardware and software...

9.8CVSS9.3AI score0.97116EPSS
Exploits26References1
Rows per page
Query Builder