3521 matches found
Photon OS 3.0: Lua PHSA-2019-3.0-0036
An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0036. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20307...
Photon OS 4.0: Lua PHSA-2022-4.0-0173
An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0173. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20318...
Photon OS 4.0: Lua PHSA-2022-4.0-0214
An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0214. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20332...
Photon OS 4.0: Lua PHSA-2021-4.0-0130
An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0130. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20347...
Photon OS 4.0: Lua PHSA-2022-4.0-0168
An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0168. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20323...
Ankitects Anki MPV script injection vulnerability
Talos Vulnerability Report TALOS-2024-1993 Ankitects Anki MPV script injection vulnerability July 22, 2024 CVE Number CVE-2024-26020 SUMMARY An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary...
PT-2025-1017
Name of the Vulnerable Software and Affected Versions: Redis versions prior to 7.4.2, versions prior to 7.2.7, and versions prior to 6.2.17. Redis versions 5:6.0.16-1+deb11u5 and 5:7.0.15-1deb12u3. Redis versions 6.2.17-alt1. Description: Redis, an in-memory data store, is affected by a...
RHEL 8 : redis (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - redis: Code injection via Lua script execution environment CVE-2022-24735 - redis: heap overflow in the l...
CBL Mariner 2.0 Security Update: lua / ntopng / memcached (CVE-2021-45985)
The version of lua / ntopng / memcached installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-45985 advisory. - In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffe...
ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal as demonstrated by getlocal(32^31).
...
CVE-2024-39840
Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...
CVE-2024-39840
Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...
CVE-2024-39840
Factorio before 1.1.101 is affected. A crafted server map can trigger arbitrary code execution on clients by abusing certain Lua base module functions to execute bytecode and create fake objects. Affected component: Factorio server/client interaction via custom maps; root cause: Lua base module f...
CVE-2024-39840
Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...
CVE-2024-39207
lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmemwrite function...
CVE-2024-39207
lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmemwrite function...
PT-2024-28387 · Lua-Shmem · Lua-Shmem
Name of the Vulnerable Software and Affected Versions: lua-shmem version 1.0-1 Description: A buffer overflow issue was discovered in lua-shmem via the shmem write function. Recommendations: For lua-shmem version 1.0-1, consider disabling the shmem write function until a patch is available...
luci-app-lucky security vulnerability
luci-app-lucky is a LuCI application designed for OpenWrt firmware by the individual developer gdy666. A security vulnerability exists in luci-app-lucky version v2.8.3, which stems from the use of hard-coded credentials...
CVE-2024-39207
Lua-shmem v1.0-1 contains a buffer overflow in the shmem_write function. The CVE-2024-39207 entry (CVSS v3.1: 8.2, HIGH) indicates network attack vector with no privileges, no user interaction, causing high availability impact and low integrity impact. Connected advisories corroborate the same de...