Lucene search
K

3322 matches found

OSV
OSV
added 2025/05/13 12:0 a.m.21 views

ALSA-2025:7509 Important: valkey security update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

7.5CVSS6.9AI score0.00824EPSS
Exploits0References4
Fedora
Fedora
added 2025/05/03 2:9 a.m.6 views

[SECURITY] Fedora 42 Update: valkey-8.0.3-1.fc42

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

7.5CVSS7.4AI score0.00824EPSS
Exploits0
Fedora
Fedora
added 2025/05/03 1:11 a.m.20 views

[SECURITY] Fedora 41 Update: valkey-8.0.3-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

7.5CVSS7.4AI score0.00824EPSS
Exploits0
Fedora
Fedora
added 2025/05/03 1:11 a.m.16 views

[SECURITY] Fedora 40 Update: redis-7.2.8-1.fc40

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

7.5CVSS7.4AI score0.00824EPSS
Exploits0
GithubExploit
GithubExploit
added 2025/04/27 1:42 p.m.1086 views

Exploit for CVE-2024-31449

CVE-2024-31449 Redis는 오픈 소스 인메모리 비관계형 데이터베이스이다. 요약 - Redis...

7CVSS7AI score0.04488EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/04/26 4:58 a.m.12 views

CVE-2025-26269

DragonflyDB Dragonfly through 1.28.2 fixed in 1.29.0 allows authenticated users to cause a denial of service daemon crash via a Lua library command that references a large negative integer...

5.5CVSS6.7AI score0.00239EPSS
Exploits1References1
OSV
OSV
added 2025/04/22 4:15 p.m.4 views

CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.7CVSS6.7AI score
Exploits0References3
OSV
OSV
added 2025/04/22 4:15 p.m.1 views

DEBIAN-CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.7CVSS7.5AI score0.00668EPSS
Exploits1References1
OSV
OSV
added 2025/04/22 4:15 p.m.1 views

UBUNTU-CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.7CVSS5.8AI score0.00668EPSS
Exploits1References4
CVE
CVE
added 2025/04/22 12:0 a.m.92 views

CVE-2024-33452

CVE-2024-33452 applies to OpenResty lua-nginx-module v0.10.26 and earlier, allowing HTTP request smuggling via a crafted HEAD request. Connected sources confirm the issue in the lua-nginx-module (OpenResty) and note a patch path via vendor advisories: Debian’s DLA-4228-1 fixes nginx/libnginx-mod-...

7.7CVSS7.1AI score0.00668EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2025/04/22 12:0 a.m.2 views

OpenResty lua-nginx-module 安全漏洞

OpenResty lua-nginx-module is an OpenResty USA open source component for integrating the Lua scripting language into Nginx servers. A security vulnerability exists in OpenResty lua-nginx-module v0.10.26 and earlier versions, which stems from a specially crafted HEAD request that results in an...

7.7CVSS7.1AI score0.00668EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/04/22 12:0 a.m.9 views

CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.1AI score0.00668EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/04/22 12:0 a.m.10 views

CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

0.00668EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2025/04/22 12:0 a.m.5 views

CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.7CVSS7.5AI score0.00668EPSS
Exploits1
OSV
OSV
added 2025/04/17 6:15 p.m.4 views

CVE-2025-26269

DragonflyDB Dragonfly through 1.28.2 fixed in 1.29.0 allows authenticated users to cause a denial of service daemon crash via a Lua library command that references a large negative integer...

5.5CVSS4AI score
Exploits0References3
NVD
NVD
added 2025/04/17 6:15 p.m.10 views

CVE-2025-26269

DragonflyDB Dragonfly through 1.28.2 fixed in 1.29.0 allows authenticated users to cause a denial of service daemon crash via a Lua library command that references a large negative integer...

5.5CVSS0.00239EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/04/17 12:0 a.m.8 views

CVE-2025-26269

DragonflyDB Dragonfly through 1.28.2 fixed in 1.29.0 allows authenticated users to cause a denial of service daemon crash via a Lua library command that references a large negative integer...

3.3CVSS3.9AI score0.00239EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.1 views

Dragonfly 安全漏洞

Dragonfly is an open source framework from DragonflyDB that allows dynamic processing of any content type. A security vulnerability exists in Dragonfly 1.28.2 and earlier versions, which stems from a Lua library command that references a large negative integer, potentially leading to a denial of...

5.5CVSS6.6AI score0.00239EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.5 views

PT-2025-17221 · Unknown · Dragonflydb Dragonfly

Name of the Vulnerable Software and Affected Versions: DragonflyDB Dragonfly versions 1.28.2 and earlier Description: The issue allows authenticated users to cause a denial of service, resulting in a daemon crash, by utilizing a Lua library command that references a large negative integer...

5.5CVSS6.5AI score0.00239EPSS
Exploits1References9
Cvelist
Cvelist
added 2025/04/17 12:0 a.m.10 views

CVE-2025-26269

DragonflyDB Dragonfly through 1.28.2 fixed in 1.29.0 allows authenticated users to cause a denial of service daemon crash via a Lua library command that references a large negative integer...

3.3CVSS0.00239EPSS
Exploits1References3
Rows per page
Query Builder