Lucene search
+L

69 matches found

SUSE Linux
SUSE Linux
added 2025/08/04 3:04 p.m.6 views

Security update for redis

This update for redis fixes the following issues: CVE-2025-27151: Fixed absence of filename size check may cause a stack overflow. bsc1243804 CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 CVE-2025-48367: Fixed...

8.8CVSS10AI score0.03963EPSS
SaveExploits4References12
SUSE Linux
SUSE Linux
added 2025/08/04 3:04 p.m.8 views

Security update for redis

This update for redis fixes the following issues: CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation and Do...

8.8CVSS10AI score0.03963EPSS
SaveExploits4References8
SUSE Linux
SUSE Linux
added 2025/08/04 3:03 p.m.7 views

Security update for redis

This update for redis fixes the following issues: CVE-2025-27151: Fixed absence of filename size check may cause a stack overflow. bsc1243804 CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 CVE-2025-48367: Fixed...

8.8CVSS10AI score0.03963EPSS
SaveExploits4References12
SUSE Linux
SUSE Linux
added 2025/08/01 3:13 p.m.6 views

Security update for valkey

This update for valkey fixes the following issues: CVE-2025-32023: Fixed an out-of-bounds write when working with HyperLogLog commands that can lead to remote code execution. bsc1246059 CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros that can lead to client...

8.8CVSS10AI score0.03963EPSS
SaveExploits4References8
OSV
OSV
added 2025/08/01 3:13 p.m.5 views

SUSE-SU-2025:02593-1 Security update for valkey

This update for valkey fixes the following issues: - CVE-2025-32023: Fixed an out-of-bounds write when working with HyperLogLog commands that can lead to remote code execution. bsc1246059 - CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros that can lead to client...

7.8CVSS6.1AI score0.03963EPSS
SaveExploits4References5
SUSE Linux
SUSE Linux
added 2025/07/31 11:38 a.m.9 views

Security update for redis

This update for redis fixes the following issues: CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation and Do...

8.8CVSS10AI score0.03963EPSS
SaveExploits4References10
RedhatCVE
RedhatCVE
added 2025/07/09 4:03 p.m.10 views

CVE-2025-48367

A flaw was found in Redis. Unauthenticated connections can trigger repeated IP protocol errors, leading to client starvation and an application-level denial of service. This flaw allows an attacker to induce this condition without authentication. This issue results in a denial of service conditio...

7.5CVSS5.9AI score0.01061EPSS
SaveExploits0References9
NVD
NVD
added 2025/07/07 4:15 p.m.13 views

CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS0.01061EPSS
SaveExploits0References6
OSV
OSV
added 2025/07/07 4:15 p.m.7 views

ALPINE-CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS6.9AI score0.01061EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/07/07 3:25 p.m.12 views

CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS4.4AI score0.01061EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2025/07/07 3:25 p.m.22 views

CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS6.5AI score0.01061EPSS
SaveExploits0References6
OSV
OSV
added 2025/07/07 3:25 p.m.10 views

CVE-2025-48367 Redis DoS Vulnerability due to bad connection error handling

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS4.1AI score
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/07/07 12:00 a.m.3 views

FreeBSD : redis,valkey -- DoS Vulnerability due to bad connection error handling (7b3e7f71-5b30-11f0-b507-000c295725e4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7b3e7f71-5b30-11f0-b507-000c295725e4 advisory. @julienperriercornet reports: An unauthenticated connection can cause repeated IP protocol errors,...

7.5CVSS6.9AI score0.01061EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/07/06 12:00 a.m.9 views

PT-2025-28132

Name of the Vulnerable Software and Affected Versions: Redis versions prior to 8.0.3 Redis versions prior to 7.4.5 Redis versions prior to 7.2.10 Redis versions prior to 6.2.19 Description: The issue is related to an unauthenticated connection that can cause repeated IP protocol errors, leading t...

9.8CVSS6.7AI score0.77422EPSS
SaveExploits10References139
RedhatCVE
RedhatCVE
added 2025/05/22 10:23 a.m.15 views

CVE-2019-9228

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The 1 management SSH and 2 management TELNET features allow remote attackers to cause a denial of service connection slot exhaustion via 5...

7.5CVSS7.3AI score0.01812EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 11:38 a.m.35 views

CVE-2025-3083

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0...

7.5CVSS7.1AI score0.00437EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/04/01 11:12 a.m.13 views

CVE-2025-3083 Malformed MongoDB wire protocol messages may cause mongos to crash

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to...

7.5CVSS7.1AI score0.00437EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 11:12 a.m.99 views

CVE-2025-3083 Malformed MongoDB wire protocol messages may cause mongos to crash

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to...

7.5CVSS0.00437EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 11:12 a.m.146 views

CVE-2025-3083

This CVE affects MongoDB: malformed wire protocol messages can crash mongos during command validation, exploitable without authentication. Affected versions are MongoDB v5.0 before 5.0.31, v6.0 before 6.0.20, and v7.0 before 7.0.16. Impact is a denial of service (availability) with a high severit...

7.5CVSS7.1AI score0.00437EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/01/23 4:15 p.m.28 views

CVE-2024-52325

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin over an unauthenticated BLE connection...

9.6CVSS0.03039EPSS
SaveExploits1References4
Rows per page
Query Builder