Lucene search
+L

781 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:0 a.m.26 views

ICONICS GENESIS64 DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of ICONICS GENESIS64. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.6AI score0.02743EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:0 a.m.27 views

Fuji Electric Tellus Lite V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.00912EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2021/10/25 5:58 p.m.48 views

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (redis) security update

An update for redis is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

8.8CVSS6.7AI score0.1578EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2021/10/21 12:0 a.m.32 views

Fedora: Security Advisory for redis (FEDORA-2021-61c487f241)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9CVSS6.8AI score0.1578EPSS
SaveExploits0References2
AlmaLinux
AlmaLinux
added 2021/10/20 12:46 p.m.96 views

Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

8.8CVSS8.6AI score0.1578EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2021/10/20 12:0 a.m.41 views

RHEL 8 : redis:5 (RHSA-2021:3918)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3918 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets...

8.8CVSS6.7AI score0.1578EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux
added 2021/10/19 1:52 p.m.98 views

Important: Red Hat Security Advisory: redis:5 security update

An update for the redis:5 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.8CVSS6.7AI score0.1578EPSS
SaveExploits0References7
OSV
OSV
added 2021/10/19 1:14 p.m.46 views

RLSA-2021:3918 Important: redis:5 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

7.5CVSS8.7AI score0.1578EPSS
SaveExploits0References7
AlmaLinux
AlmaLinux
added 2021/10/19 1:14 p.m.47 views

Important: redis:5 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

8.8CVSS8.6AI score0.1578EPSS
SaveExploits0References7
OSV
OSV
added 2021/10/19 1:14 p.m.57 views

ALSA-2021:3918 Important: redis:5 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

8.8CVSS8.7AI score0.1578EPSS
SaveExploits0References7
Fedora
Fedora
added 2021/10/12 11:45 p.m.81 views

[SECURITY] Fedora 34 Update: redis-6.2.6-1.fc34

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

9CVSS0.7AI score0.1578EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/10/12 10:23 p.m.56 views

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...

8.8CVSS4.9AI score0.10618EPSS
SaveExploits1References8Affected Software4
OSV
OSV
added 2021/10/12 10:23 p.m.6 views

GHSA-M6VM-8G8V-XFJH Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 corresponds with OpenCV-Python 4.1.0.25. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An...

8.8CVSS7.5AI score0.20947EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2021/09/30 12:0 a.m.7 views

The vulnerability in the `net/can/bcm.c` component of the Linux operating system allows a hacker to read a portion of the kernel’s memory.

The vulnerability in the net/can/bcm.c component of the Linux operating system exists due to the lack of initialization for a certain data structure. Exploiting this vulnerability could allow an attacker to read part of the kernel’s memory...

5.5CVSS6.6AI score0.00472EPSS
SaveExploits1References34Affected Software6
OSV
OSV
added 2021/08/25 8:59 p.m.3 views

GHSA-8Q64-WRFR-Q48C Data races in model

Shared data structure in model crate implements Send and Sync traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat Shared as an unsafe type. It should not be used outside of the testing context, and...

5.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2021/08/25 8:57 p.m.33 views

Data races in appendix

The appendix crate implements a key-value mapping data structure called Index that is stored on disk. The crate allows for any type to inhabit the generic K and V type parameters and implements Send and Sync for them unconditionally. Using a type that is not marked as Send or Sync with Index can...

5.9CVSS5.8AI score0.00978EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:56 p.m.44 views

Data races in model

Shared data structure in model crate implements Send and Sync traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat Shared as an unsafe type. It should not be used outside of the testing context, and...

8.1CVSS7.8AI score0.01098EPSS
SaveExploits1References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/08/11 12:0 a.m.55 views

Apple macOS CoreText TTF Parsing Out-of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS3.6AI score0.01248EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/08/09 12:0 a.m.58 views

Apple macOS AppKit PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the AppKit library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS3.6AI score0.01204EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/08 6:15 a.m.37 views

CVE-2020-36460

An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type...

8.1CVSS0.01098EPSS
SaveExploits1References2
Rows per page
Query Builder