Lucene search
K

7037 matches found

OSV
OSV
added 2023/03/20 8:15 p.m.2 views

DEBIAN-CVE-2023-28425

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS5AI score0.54978EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2023/03/20 8:15 p.m.52 views

CVE-2023-28425

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS5.6AI score0.54978EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2023/03/20 8:15 p.m.25 views

CVE-2023-28425

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS6.3AI score0.54978EPSS
Exploits0References4
OSV
OSV
added 2023/03/20 7:3 p.m.31 views

CVE-2023-28425 Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS4.3AI score0.54978EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2023/03/20 12:0 a.m.39 views

CBL Mariner 2.0 Security Update: redis (CVE-2023-22458)

The version of redis installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-22458 advisory. - Redis is an in-memory database that persists on disk. Authenticated users can issue a HRANDFIELD or ZRANDMEMB...

5.5CVSS6.9AI score0.69355EPSS
Exploits0References2
FreeBSD
FreeBSD
added 2023/03/20 12:0 a.m.45 views

redis -- specially crafted MSETNX command can lead to denial-of-service

Yupeng Yang reports: Authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process...

5.5CVSS5.8AI score0.54978EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/03/17 12:0 a.m.4 views

The vulnerability of the Single Sign-On module in the application’s software platform for deployment and testing of software applications of Mendix allows a perpetrator to gain unauthorized access to the application.

The vulnerability of the Single Sign-On module for application SAML in the software platform for deployment and testing of software applications of Mendix is related to errors in the implementation of the authentication algorithm. Exploiting this vulnerability may allow a malicious actor to gain...

9.4CVSS7.2AI score0.00581EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/03/14 12:0 a.m.4 views

Siemens Mendix SAML Module 授权问题漏洞

The Mendix SAML Module allows the use of SAML to authenticate users in cloud applications. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. An authentication bypass vulnerability exists in Siemens Mendix SAML Module, which stems from inadequate validatio...

9.1CVSS7AI score0.00581EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/03/14 12:0 a.m.3 views

PT-2023-1689 · Mendix · Mendix Saml

Name of the Vulnerable Software and Affected Versions: Mendix SAML Mendix 7 compatible versions 1.16.4 through 1.17.3 Mendix SAML Mendix 8 compatible versions 2.2.0 through 2.3.0 Mendix SAML Mendix 9 latest compatible, New Track versions 3.1.9 through 3.3.1 Mendix SAML Mendix 9 latest compatible,...

9.1CVSS8.4AI score0.00581EPSS
Exploits0References3
OSV
OSV
added 2023/03/11 7:0 p.m.7 views

MGASA-2023-0086 Updated redis packages fix security vulnerability

Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. CVE-2023-25155 String matching commands like SCAN or KEYS with a specially crafted pattern to trigger a...

6.5CVSS6.1AI score0.59706EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/03/11 12:0 a.m.34 views

Fedora 38 : redis (2023-b0768fba7b)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b0768fba7b advisory. Redis 7.0.9 - Released Tue Feb 28 12:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: CVE-2023-25155...

6.5CVSS7.1AI score0.59706EPSS
Exploits0References3
NVD
NVD
added 2023/03/10 9:15 p.m.22 views

CVE-2022-33272

Transient DOS in modem due to reachable assertion...

7.5CVSS7.5AI score0.00406EPSS
Exploits0References1
NVD
NVD
added 2023/03/10 9:15 p.m.24 views

CVE-2022-40527

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM...

7.5CVSS7.5AI score0.00406EPSS
Exploits0References1
Prion
Prion
added 2023/03/10 9:15 p.m.13 views

Authentication flaw

Transient DOS in modem due to reachable assertion...

5CVSS7.5AI score0.00406EPSS
Exploits0References1
Prion
Prion
added 2023/03/10 9:15 p.m.18 views

Authentication flaw

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM...

5CVSS7.5AI score0.00406EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/03/09 12:0 a.m.34 views

Fedora 37 : redis (2023-c685251667)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c685251667 advisory. Redis 7.0.9 - Released Tue Feb 28 12:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: CVE-2023-25155...

6.5CVSS7.1AI score0.59706EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/03/07 4:43 a.m.27 views

CVE-2022-40527 Reachable Assertion in WLAN Embedded SW

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM...

7.5CVSS7.7AI score0.00406EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/03/07 4:43 a.m.13 views

CVE-2022-40527 Reachable Assertion in WLAN Embedded SW

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM...

7.5CVSS6.9AI score0.00406EPSS
Exploits0References1
CVE
CVE
added 2023/03/07 4:43 a.m.67 views

CVE-2022-40527

CVE-2022-40527 is described as a Transient Denial of Service caused by a reachable assertion in WLAN when processing PEER ID populated by TQM. Multiple sources (NVD entry and various security catalogs) list a NETWORK attack vector with no required user interaction, and a high availability impact ...

7.5CVSS7.5AI score0.00406EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/03/07 4:43 a.m.74 views

CVE-2022-33272

CVE-2022-33272 describes a transient DoS in the modem caused by a reachable assertion. The issue is associated with Qualcomm closed‑source modem components; exploitation details are not provided in the initial document, but CVSSv3.1 indicates Network access, no user interaction, low attack comple...

7.5CVSS7.5AI score0.00406EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder