Lucene search
K

25 matches found

Vulnrichment
Vulnrichment
added 2026/06/01 4:51 p.m.7 views

CVE-2026-45278 Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass

Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, when the victim uses the attackers link to log in via user OIDC. This issue has been patched in version 8.2.2...

3.3CVSS5.7AI score0.00015EPSS
Exploits0References3
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в redis

Redis is an open-source, in-memory database that persists data on disk. Versions 8.2.1 and earlier allow an authenticated user to use a specially crafted Lua script to read out-of-bounds data or cause the server to crash, resulting in a denial of service attack. This vulnerability exists in all...

7.1CVSS6.7AI score0.07828EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/21 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: redis5 (UTSA-2025-988577)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988577 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to...

9.9CVSS8.3AI score0.11111EPSS
Exploits13References4
OSV
OSV
added 2025/10/16 9:19 a.m.2 views

BIT-VALKEY-2025-49844 Redis Lua Use-After-Free may lead to remote code execution

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all...

9.9CVSS7.8AI score0.11111EPSS
Exploits13References6
OSV
OSV
added 2025/10/16 9:18 a.m.4 views

BIT-REDIS-2025-49844 Redis Lua Use-After-Free may lead to remote code execution

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all...

9.9CVSS7.7AI score0.11111EPSS
Exploits13References6
OSV
OSV
added 2025/10/08 8:51 a.m.3 views

BIT-REDIS-2025-46819 Redis is vulnerable to DoS via specially crafted LUA scripts

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua...

7.1CVSS6.3AI score0.07828EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2025/10/05 2:52 a.m.1 views

SUSE CVE-2025-46819

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua...

8.1CVSS6.4AI score0.07828EPSS
Exploits0References18
CVE
CVE
added 2025/10/03 5:52 p.m.54 views

CVE-2025-46817

The CVE-2025-46817 issue is in Redis Lua scripting: authenticated users can trigger an integer overflow via a crafted Lua script, potentially enabling remote code execution. Affected are Redis versions 8.2.1 and earlier; the problem exists across Redis installations that support Lua scripting. Th...

8.8CVSS7.5AI score0.10506EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/02 12:0 a.m.2 views

PT-2025-40555

Name of the Vulnerable Software and Affected Versions Redis versions 8.2.1 and below Redis versions prior to 8.2.2 Description Redis, an in-memory database, contains an issue where an authenticated user can utilize a crafted Lua script to trigger an integer overflow. This could potentially lead t...

10CVSS8.4AI score0.88997EPSS
Exploits20References251
SUSE CVE
SUSE CVE
added 2023/02/15 6:0 a.m.1 views

SUSE CVE-2010-0198

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0199, CVE-2010-0202, and CVE-2010-0203...

9.3CVSS8.3AI score0.26977EPSS
Exploits0References4
OSV
OSV
added 2022/04/12 6:15 p.m.0 views

CVE-2022-22550

Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An unprivileged local attacker could potentially exploit this vulnerability, leading to account take over...

6.7CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/31 12:0 a.m.3 views

CVE-2022-22550

Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An unprivileged local attacker could potentially exploit this vulnerability, leading to account take over...

6.7CVSS6.6AI score0.00036EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2021/09/07 2:15 p.m.1 views

AZL-6751 CVE-2021-33289 affecting package ntfs-3g for versions less than 2021.8.22-1

In NTFS-3G versions 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution...

7.8CVSS7.1AI score0.00158EPSS
Exploits0References1
OSV
OSV
added 2021/06/09 3:15 p.m.0 views

CVE-2020-15383

Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0, v8.2.2d and v8.2.1e to consume all memory leading to denial of service impacts possibly including a switch panic...

7.5CVSS5.8AI score0.00468EPSS
Exploits0References2
OSV
OSV
added 2021/01/20 11:15 p.m.1 views

CVE-2021-1069

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a null pointer reference, causing data loss...

6.1CVSS6.3AI score
Exploits0References2
OSV
OSV
added 2021/01/20 3:15 p.m.1 views

UBUNTU-CVE-2021-2038

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.4CVSS6.6AI score0.00201EPSS
Exploits0References4
OSV
OSV
added 2021/01/20 3:15 p.m.0 views

UBUNTU-CVE-2021-2087

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server...

4.4CVSS6.6AI score0.00091EPSS
Exploits0References4
OSV
OSV
added 2020/08/27 7:15 p.m.1 views

CVE-2020-5383

Dell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer overflow vulnerability in the Likewise component. A remote unauthenticated malicious attacker may potentially exploit this vulnerability to cause a process restart...

5.3CVSS6.4AI score0.0029EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/07 12:0 a.m.1 views

Dell EMC Isilon OneFS and EMC PowerScale File Permissions Vulnerability

Dell EMC Isilon OneFS and EMC PowerScale are both horizontally scalable storage systems for unstructured data from Dell, USA. A security vulnerability exists in Dell EMC Isilon OneFS version 8.2.2 and earlier and EMC PowerScale version 9.0.0. An attacker could exploit the vulnerability to access...

8.8CVSS6.7AI score0.00277EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/07 12:0 a.m.1 views

Dell EMC Isilon OneFS Resource Management Error Vulnerability

Dell EMC Isilon OneFS is a horizontally scalable storage system for unstructured data from Dell USA. A resource management error vulnerability exists in Dell EMC Isilon OneFS 8.2.2 and prior versions. An attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS6.7AI score0.00536EPSS
Exploits0
Rows per page
Query Builder