Lucene search
+L

5475 matches found

AlpineLinux
AlpineLinux
added 2025/10/03 6:38 p.m.7 views

CVE-2025-46818

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

7.3CVSS6.7AI score0.00701EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/10/03 6:38 p.m.8 views

CVE-2025-46818

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

7.3CVSS6.7AI score0.00701EPSS
SaveExploits0
OSV
OSV
added 2025/10/03 6:15 p.m.11 views

AZL-68664 CVE-2025-46817 affecting package compat-lua 5.1.5-17

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS7.5AI score0.03692EPSS
SaveExploits1References1
NVD
NVD
added 2025/10/03 6:15 p.m.7 views

CVE-2025-46817

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS0.03692EPSS
SaveExploits1References3
OSV
OSV
added 2025/10/03 6:15 p.m.7 views

ALPINE-CVE-2025-46817

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS9.2AI score0.03692EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/03 6:15 p.m.9 views

AZL-68238 CVE-2025-46817 affecting package valkey for versions less than 8.0.6-1

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS7.2AI score0.03692EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/03 6:15 p.m.12 views

AZL-68661 CVE-2025-46817 affecting package compat-lua 5.1.5-17

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS6.2AI score0.03692EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/03 6:15 p.m.11 views

UBUNTU-CVE-2025-46817

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS7.6AI score0.03692EPSS
SaveExploits1References8
AlpineLinux
AlpineLinux
added 2025/10/03 5:52 p.m.8 views

CVE-2025-46817

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS7.9AI score0.03692EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/10/03 5:52 p.m.3 views

CVE-2025-46817 Lua library commands may lead to integer overflow and potential RCE

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

7CVSS7.5AI score0.03692EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/10/03 5:52 p.m.16 views

CVE-2025-46817 Lua library commands may lead to integer overflow and potential RCE

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

7CVSS0.03692EPSS
SaveExploits1References3
CVE
CVE
added 2025/10/03 5:52 p.m.122 views

CVE-2025-46817

The CVE-2025-46817 issue is in Redis Lua scripting: authenticated users can trigger an integer overflow via a crafted Lua script, potentially enabling remote code execution. Affected are Redis versions 8.2.1 and earlier; the problem exists across Redis installations that support Lua scripting. Th...

8.8CVSS7.5AI score0.03692EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2025/10/03 5:52 p.m.7 views

EUVD-2025-32363

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

7CVSS7.2AI score0.03692EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2025/10/03 5:52 p.m.8 views

CVE-2025-46817

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS7.5AI score0.03692EPSS
SaveExploits1
OSV
OSV
added 2025/10/03 5:52 p.m.8 views

CVE-2025-46817 Lua library commands may lead to integer overflow and potential RCE

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

7CVSS7.5AI score
SaveExploits0References5
FreeBSD
FreeBSD
added 2025/10/03 12:00 a.m.17 views

redis,valkey -- Out of bound read due to a bug in LUA

redis reports: An authenticated user may use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting An additional workaround to mitigate the problem without patching the...

7.1CVSS6.9AI score0.01023EPSS
SaveExploits0References1
FreeBSD
FreeBSD
added 2025/10/03 12:00 a.m.6 views

redis,valkey -- Lua library commands may lead to integer overflow and potential RCE

redis reports: An authenticated user may use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting. An additional workaround to mitigate the problem without patching the redis-server...

8.8CVSS7.2AI score0.03692EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/10/03 12:00 a.m.33 views

Redis 代码注入漏洞

Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. that provides APIs in multiple languages. A code injection vulnerability exists in Redis 8.2.1 and earlier versions, which originates from allowing an...

7.3CVSS9.2AI score0.00701EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2025/10/03 12:00 a.m.12 views

redis,valkey -- Running Lua function as a different user

redis reports: An authenticated user may use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user The problem exists in all versions of Redis with Lua scripting. An additional workaround to mitigate the problem withou...

7.3CVSS6.9AI score0.00701EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/03 12:00 a.m.7 views

Redis 输入验证错误漏洞

Redis is an open source, ANSI C, web-enabled, memory-based and persistent logging, key-value Key-Value storage database from Redis, Inc. that provides APIs in multiple languages. An input validation error vulnerability exists in Redis 8.2.1 and earlier versions, which stems from a specially craft...

8.8CVSS9.3AI score0.03692EPSS
SaveExploits1References4
Rows per page
Query Builder