Lucene search
+L

5507 matches found

OSV
OSV
added 2022/06/20 8:17 p.m.13 views

MAL-2022-1535 Malicious code in bfx-facs-redis-lock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3c26214473ece8ebc3a44ab6efcdf3749d2436c66f2580d59f98a4ba9b8d23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:17 p.m.6 views

Malicious code in bfx-facs-redis-lock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3c26214473ece8ebc3a44ab6efcdf3749d2436c66f2580d59f98a4ba9b8d23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:17 p.m.5 views

Malicious code in bfx-facs-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7417aae218cce44390d6468cd5da7707683aa20dce949d7069ec22aad1b97d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:17 p.m.12 views

MAL-2022-1534 Malicious code in bfx-facs-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7417aae218cce44390d6468cd5da7707683aa20dce949d7069ec22aad1b97d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:10 p.m.10 views

Malicious code in azure-arm-redisenterprisecache-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4a83adabd3ccf9130b2784b86fbcf8b0308089d96a63fc7d2bfd94a60d95a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:10 p.m.9 views

Malicious code in azure-arm-redisenterprisecache-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287105dec0a9d6e2b4c952bb5b18669bf2d09a8c934a035360e2f7bba7262936 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:10 p.m.13 views

MAL-2022-1277 Malicious code in azure-arm-redisenterprisecache-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287105dec0a9d6e2b4c952bb5b18669bf2d09a8c934a035360e2f7bba7262936 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/06/03 12:00 a.m.20 views

openSUSE: Security Advisory for redis (SUSE-SU-2022:1929-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.9AI score0.02264EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2022/06/03 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2022:1929-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.02264EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2022/06/03 12:00 a.m.37 views

SUSE SLES15 Security Update : redis (SUSE-SU-2022:1929-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1929-1 advisory. - Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attack...

7.8CVSS6.9AI score0.02264EPSS
SaveExploits2References7
OSV
OSV
added 2022/06/02 3:34 p.m.10 views

SUSE-SU-2022:1929-1 Security update for redis

This update for redis fixes the following issues: - CVE-2022-24735: Fixed Lua code injection bsc1198952. - CVE-2022-24736: Fixed Lua NULL pointer dereference bsc1198953...

7.8CVSS6.6AI score0.02264EPSS
SaveExploits2References5
NVD
NVD
added 2022/05/26 2:15 p.m.24 views

CVE-2022-20821

A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379 by default upon activation. An attack...

6.5CVSS0.12094EPSS
SaveExploits0References2
Prion
Prion
added 2022/05/26 2:15 p.m.29 views

Design/Logic Flaw

A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379 by default upon activation. An attack...

6.4CVSS6.8AI score0.12094EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/05/26 2:00 p.m.12 views

CVE-2022-20821 Cisco IOS XR Software Health Check Open Port Vulnerability

A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379 by default upon activation. An attack...

6.5CVSS7.4AI score0.12094EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/05/26 2:00 p.m.35 views

CVE-2022-20821 Cisco IOS XR Software Health Check Open Port Vulnerability

A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379 by default upon activation. An attack...

6.5CVSS7AI score0.12094EPSS
SaveExploits0References1
CVE
CVE
added 2022/05/26 2:00 p.m.1154 views

CVE-2022-20821

Cisco IOS XR Software health check RPM opens port 6379 by default, exposing the Redis instance inside the NOSi container to unauthenticated remote access. This could allow writing to the Redis in-memory DB, writing arbitrary files to the container filesystem, and retrieving Redis data. The vulner...

6.5CVSS6.8AI score0.12094EPSS
SaveIn wildExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/05/26 12:00 a.m.50 views

Cisco IOS XR Software Health Check Open Port (cisco-sa-iosxr-redis-ABJyE5xK)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability in the health check RPM due to a port that is open by default. An unauthenticated, remote attacker can exploit this, by connecting to the Redis instance on the open port, in order to read and write information...

6.5CVSS6.9AI score0.12094EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/05/26 12:00 a.m.34 views

SUSE SLES15 Security Update : redis (SUSE-SU-2022:1842-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1842-1 advisory. - Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attack...

7.8CVSS6.9AI score0.02264EPSS
SaveExploits2References7
OpenVAS
OpenVAS
added 2022/05/26 12:00 a.m.21 views

openSUSE: Security Advisory for redis (SUSE-SU-2022:1842-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.9AI score0.02264EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2022/05/26 12:00 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2022:1842-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.02264EPSS
SaveExploits2References2
Rows per page
Query Builder