Lucene search
K

90 matches found

ATTACKERKB
ATTACKERKB
added 3 days ago5 views

CVE-2026-45278

Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, when the victim uses the attackers link to log in via user OIDC. This issue has been patched in version 8.2.2...

3.3CVSS5.7AI score0.00011EPSS
Exploits0References4Affected Software1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в redis

Redis is an open-source, in-memory database that persists data on disk. Versions 8.2.1 and earlier allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, triggering a use-after-free and potentially leading to remote code execution. This issue exists...

9.9CVSS7.2AI score0.11111EPSS
Exploits13References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в redis

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS7.4AI score0.10506EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в redis

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

7.3CVSS6.8AI score0.03652EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/30 3:28 p.m.1 views

CVE-2026-5170

A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary o...

6CVSS5.9AI score0.00049EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/03/15 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: redis6 (UTSA-2026-006135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006135 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to...

7.3CVSS7AI score0.03652EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/11 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: redis (UTSA-2026-005347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005347 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to caus...

8.8CVSS6.2AI score0.10506EPSS
Exploits1References4
F5 Networks
F5 Networks
added 2026/01/13 10:13 p.m.9 views

K000159544: Redis Lua vulnerability CVE-2025-49844

Security Advisory Description Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution...

9.9CVSS7.6AI score0.11111EPSS
Exploits13Affected Software30
RedhatCVE
RedhatCVE
added 2026/01/09 9:20 a.m.1 views

CVE-2021-2110

Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications component: Letters. The supported version that is affected is 8.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety. While the...

5CVSS5.1AI score0.00197EPSS
Exploits0References1
MongoDB
MongoDB
added 2025/12/09 3:0 p.m.5 views

Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction...

5.4CVSS6.8AI score0.00036EPSS
Exploits0References1Affected Software1
Information Security Automation
Information Security Automation
added 2025/10/28 7:52 p.m.6 views

About Remote Code Execution – Redis “RediShell” (CVE-2025-49844) vulnerability

About Remote Code Execution - Redis "RediShell" CVE-2025-49844 vulnerability. Redis is a popular in-memory key–value database, used as a distributed cache and message broker, with optional durability. This vulnerability allows a remote authenticated attacker to execute arbitrary code via a...

9.9CVSS8.7AI score0.11111EPSS
Exploits13
Amazon
Amazon
added 2025/10/14 12:0 a.m.3 views

Important: redis

Issue Overview: Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with...

9.9CVSS8.2AI score0.11111EPSS
Exploits14
OSV
OSV
added 2025/10/08 8:52 a.m.1 views

BIT-VALKEY-2025-46818 Redis: Authenticated users can execute LUA scripts as a different user

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

7.3CVSS6.7AI score0.03652EPSS
Exploits0References4
OSV
OSV
added 2025/10/08 8:51 a.m.3 views

BIT-REDIS-2025-46818 Redis: Authenticated users can execute LUA scripts as a different user

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

7.3CVSS6.7AI score0.03652EPSS
Exploits0References4
OSV
OSV
added 2025/10/08 8:43 a.m.1 views

BIT-KEYDB-2025-46819 Redis is vulnerable to DoS via specially crafted LUA scripts

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua...

7.1CVSS6.3AI score0.08765EPSS
Exploits0References6
OSV
OSV
added 2025/10/08 8:43 a.m.1 views

BIT-KEYDB-2025-46817 Lua library commands may lead to integer overflow and potential RCE

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS7.9AI score0.10506EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-7369

Malware in sbrugna...

9.8CVSS9.4AI score0.00504EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-26537

Malware in sbrugna...

4.3CVSS4.9AI score0.00157EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-26547

Malware in sbrugna...

7.5CVSS7.5AI score0.0026EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/10/05 2:52 a.m.1 views

SUSE CVE-2025-46817

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

8.8CVSS7.9AI score0.10506EPSS
Exploits1References18
Rows per page
Query Builder