3521 matches found
PT-2024-16535 · Unknown · Appmanager
Name of the Vulnerable Software and Affected Versions: AppManager affected versions not specified Description: The issue allows Lua apps to be deployed, removed, started, reloaded, or stopped without authorization via AppManager. This enables an attacker to remove legitimate apps, creating a...
SICK InspectorP61x 安全漏洞
The SICK InspectorP61x is an ultra-compact industrial 2D vision sensor from SICK, Germany. A security vulnerability exists in the SICK InspectorP61x version prior to 5.0.0 and InspectorP62x version prior to 5.0.0 that originates from a Lua application that can be deployed, deleted, started,...
Moderate: Red Hat Security Advisory: redis:7 security update
An update for the redis:7 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
redis: Lua library commands may lead to stack overflow and RCE in Redis
A flaw was found in Redis. This flaw allows an authenticated user to use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may lead to remote code execution. The problem exists in all versions of Redis with Lua scripting...
NodeMCU 安全漏洞
NodeMCU is a Lua-based open source firmware from NodeMCU Open Source. A security vulnerability exists in NodeMCU version v3.0.0-release20240225, which stems from the getnum function in /modules/struct.c containing an integer overflow...
Fedora 41 : valkey (2024-e717420659)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e717420659 advisory. update to 8.0.1 fixes CVE-2024-31449 Lua library commands may lead to stack overflow and potential RCE. CVE-2024-31227 Potential Denial-of-service d...
Fedora 41 : lua-mpack (2024-c83b7dcae0)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c83b7dcae0 advisory. Fix buffer overrun when giving an offset to Session:receive Tenable has extracted the preceding description block directly from the Fedora security advisory...
CVE-2024-36513
A privilege context switching error vulnerability CWE-270 in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts...
CVE-2024-36513
A privilege context switching error vulnerability CWE-270 in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts...
CVE-2024-36513
A privilege context switching error vulnerability CWE-270 in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts...
CVE-2024-36513
A privilege context switching error vulnerability CWE-270 in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts...
Fortinet FortiClient Privilege escalation via lua auto patch function (FG-IR-24-144)
The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-144 advisory. - A privilege context switching error vulnerability CWE-270 in FortiClient Windows version 7.2.4 and below, version 7.0.12...
PT-2024-27041 · Fortinet · Forticlientwindows
Name of the Vulnerable Software and Affected Versions: FortiClient Windows versions 7.2.4 and below FortiClient Windows version 7.0.12 and below FortiClient Windows version 6.4 Description: A privilege context switching error vulnerability in FortiClient Windows may allow an authenticated user to...
Updated redis packages fix security vulnerabilities
An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. CVE-2024-31227 Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported...
OESA-2024-2272 redis security update
Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its...
OESA-2024-2271 redis security update
Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its...
OESA-2024-2270 redis security update
Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its...
OESA-2024-2269 redis security update
Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its...
[SECURITY] Fedora 39 Update: valkey-8.0.1-1.fc39
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
