Lucene search
+L

4190 matches found

Tenable Nessus
Tenable Nessus
•added 2026/01/31 12:00 a.m.•12 views

EulerOS Virtualization 2.10.0 : syslinux (EulerOS-SA-2026-1199)

According to the versions of the syslinux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by...

5.3CVSS6.5AI score0.03833EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2026/01/30 11:16 p.m.•19 views

CVE-2020-37032

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS6.7AI score0.01236EPSS
SaveExploits1References3
NVD
NVD
•added 2026/01/30 11:16 p.m.•26 views

CVE-2020-37032

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS0.01236EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/01/30 10:07 p.m.•64 views

CVE-2020-37032 Wing FTP Server 6.3.8 - Remote Code Execution

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS0.01236EPSS
SaveExploits1References3
CVE
CVE
•added 2026/01/30 10:07 p.m.•50 views

CVE-2020-37032

Wing FTP Server 6.3.8 is affected by a remote code execution flaw in the Lua-based web console. The issue allows authenticated users to send crafted POST requests that trigger operating system commands via os.execute(), enabling arbitrary code execution on the server. Affected component: Lua-base...

8.8CVSS6.7AI score0.01236EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2026/01/30 10:07 p.m.•14 views

CVE-2020-37032

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS6.7AI score0.01236EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/30 10:07 p.m.•16 views

CVE-2020-37032 Wing FTP Server 6.3.8 - Remote Code Execution

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS6.7AI score0.01236EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•24 views

PT-2026-5473

Name of the Vulnerable Software and Affected Versions Wing FTP Server version 6.3.8 Description The software contains a remote code execution issue in its Lua-based web console. Authenticated users can execute system commands by sending malicious commands via POST requests. The os.execute functio...

8.8CVSS6.5AI score0.01236EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/30 12:00 a.m.•9 views

CVE-2020-37032: Improper Neutralization of Special Elements used in an OS Command

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operating system execution through the...

8.8CVSS6.7AI score0.01236EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/28 9:17 a.m.•37 views

CVE-2026-24820

Out-of-bounds Read vulnerability in turanszkij WickedEngine WickedEngine/LUA modules. This vulnerability is associated with program files ldebug.C. This issue affects WickedEngine: before 0.71.705...

5.1CVSS5.8AI score0.00134EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/28 9:17 a.m.•32 views

CVE-2026-24821

Out-of-bounds Read vulnerability in turanszkij WickedEngine WickedEngine/LUA modules. This vulnerability is associated with program files lparser.C. This issue affects WickedEngine: through 0.71.727...

9.3CVSS5.8AI score0.0037EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/28 9:16 a.m.•21 views

CVE-2026-24817

Out-of-bounds Write vulnerability in praydog UEVR dependencies/lua/src modules. This vulnerability is associated with program files ldebug.C, lvm.C. This issue affects UEVR: before 1.05...

8.7CVSS5.9AI score0.003EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/28 12:00 a.m.•29 views

NewStart CGSL MAIN 6.06 : httpd Multiple Vulnerabilities (NS-SA-2025-0240)

The remote NewStart CGSL host, running version MAIN 6.06, has httpd packages installed that are affected by multiple vulnerabilities: - Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue...

9.8CVSS6.7AI score0.94999EPSS
SaveExploits16References25
osv_azl
osv_azl
•added 2026/01/27 10:15 a.m.•40 views

AZL-75512 CVE-2026-24827 affecting package lua for versions less than 5.4.4-2

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

7.5CVSS5.8AI score0.00312EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/27 9:15 a.m.•31 views

CVE-2026-24817

Out-of-bounds Write vulnerability in praydog UEVR dependencies/lua/src modules. This vulnerability is associated with program files ldebug.C, lvm.C. This issue affects UEVR: before 1.05...

8.7CVSS0.003EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/27 9:15 a.m.•29 views

CVE-2026-24820

Out-of-bounds Read vulnerability in turanszkij WickedEngine WickedEngine/LUA modules. This vulnerability is associated with program files ldebug.C. This issue affects WickedEngine: before 0.71.705...

5.1CVSS0.00134EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/27 9:15 a.m.•29 views

CVE-2026-24821

Out-of-bounds Read vulnerability in turanszkij WickedEngine WickedEngine/LUA modules. This vulnerability is associated with program files lparser.C. This issue affects WickedEngine: through 0.71.727...

9.3CVSS0.0037EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/27 9:15 a.m.•24 views

CVE-2026-24818

Out-of-bounds Read vulnerability in praydog UEVR dependencies/lua/src modules. This vulnerability is associated with program files lparser.C. This issue affects UEVR: before 1.05...

6.9CVSS0.00439EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/01/27 9:15 a.m.•25 views

AZL-75464 CVE-2026-24809 affecting package memcached for versions less than 1.6.27-4

An issue from the component luaGrunerror in dependencies/lua/src/ldebug.c in praydog/REFramework version before 1.5.5 leads to a heap-buffer overflow when a recursive error occurs...

6.9CVSS5.8AI score0.00152EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/01/27 9:15 a.m.•32 views

AZL-75521 CVE-2026-24809 affecting package memcached for versions less than 1.6.22-3

An issue from the component luaGrunerror in dependencies/lua/src/ldebug.c in praydog/REFramework version before 1.5.5 leads to a heap-buffer overflow when a recursive error occurs...

6.9CVSS5.8AI score0.00152EPSS
SaveExploits0References1
Rows per page
Query Builder