Lucene search
+L

240 matches found

OSV
OSV
added 2022/11/08 6:22 a.m.26 views

RLSA-2022:7541 Low: redis:6 security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

3.9CVSS7.1AI score0.02264EPSS
SaveExploits2References4
AlmaLinux
AlmaLinux
added 2022/11/08 12:0 a.m.124 views

Low: redis:6 security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

7.8CVSS7.5AI score0.02264EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
added 2022/11/08 12:0 a.m.38 views

RHEL 8 : redis:6 (RHSA-2022:7541)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7541 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets...

7.8CVSS7AI score0.02264EPSS
SaveExploits2References9
OSV
OSV
added 2022/11/08 12:0 a.m.33 views

ALSA-2022:7541 Low: redis:6 security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

7.8CVSS7.1AI score0.02264EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
added 2022/11/05 12:0 a.m.32 views

Amazon Linux 2022 : redis6, redis6-devel (ALAS2022-2022-199)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-199 advisory. A flaw was found in the Redis database where Lua scripts can be manipulated to overcome ACL rules. This flaw allows an attacker with access to Redis to inject Lua code that executes the...

7.8CVSS6.4AI score0.02264EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
added 2022/10/27 12:0 a.m.52 views

EulerOS 2.0 SP3 : httpd (EulerOS-SA-2022-2614)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to...

9.1CVSS7.7AI score0.90407EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2022/10/09 12:0 a.m.37 views

EulerOS Virtualization 3.0.6.6 : httpd (EulerOS-SA-2022-2506)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts. T...

9.8CVSS8AI score0.97108EPSS
SaveExploits5References11
Tenable Nessus
Tenable Nessus
added 2022/09/29 12:0 a.m.83 views

GLSA-202209-17 : Redis: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-17 Redis: Multiple Vulnerabilities - Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be...

9.8CVSS8.1AI score0.31049EPSS
SaveExploits3References21
Tenable Nessus
Tenable Nessus
added 2022/09/23 12:0 a.m.49 views

EulerOS Virtualization 2.9.1 : httpd (EulerOS-SA-2022-2347)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an...

9.8CVSS7.8AI score0.90407EPSS
SaveExploits2References9
OpenVAS
OpenVAS
added 2022/09/22 12:0 a.m.24 views

Mageia: Security Advisory (MGASA-2022-0339)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.2AI score0.02264EPSS
SaveExploits2References7
Mageia
Mageia
added 2022/09/21 6:15 p.m.60 views

Updated redis packages fix security vulnerability

Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the potentially higher privileges of another Redis user. The Lua scri...

7.8CVSS2AI score0.02264EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
added 2022/09/06 12:0 a.m.44 views

Amazon Linux 2022 : redis6, redis6-devel (ALAS2022-2022-115)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-115 advisory. A flaw was found in the Redis database where Lua scripts can be manipulated to overcome ACL rules. This flaw allows an attacker with access to Redis to inject Lua code that executes the...

7.8CVSS6.4AI score0.02264EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
added 2022/08/17 12:0 a.m.56 views

EulerOS 2.0 SP5 : httpd (EulerOS-SA-2022-2270)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to...

9.1CVSS7.7AI score0.90407EPSS
SaveExploits1References6
NVD
NVD
added 2022/08/15 7:15 p.m.43 views

CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

10CVSS0.02205EPSS
SaveExploits0References3
Prion
Prion
added 2022/08/15 7:15 p.m.16 views

Design/Logic Flaw

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

7.5CVSS9.3AI score0.02205EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2022/08/15 7:15 p.m.37 views

CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

10CVSS7.2AI score0.02205EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2022/08/15 7:15 p.m.122 views

CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

10CVSS1.3AI score0.02205EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2022/08/15 7:5 p.m.109 views

CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

10CVSS9.4AI score0.02205EPSS
SaveExploits0
OSV
OSV
added 2022/08/15 7:5 p.m.24 views

CVE-2022-35978 Lua sandbox escape from mod in Minetest

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

7.7CVSS8.8AI score
SaveExploits0References5
OSV
OSV
added 2022/08/13 11:4 a.m.6 views

OESA-2022-1823 redis6 security update

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

7.8CVSS7.2AI score0.02264EPSS
SaveExploits2References3
Rows per page
Query Builder