Lucene search
+L

3763 matches found

GitLab Advisory Database
GitLab Advisory Database
•added 2022/05/05 12:00 a.m.•39 views

ReviewBoard and Djblets library are vulnerable to code execution

An eval vulnerability exists in Python Software Foundation Djblets version before 0.6.30 and 0.7.0 before 0.7.19 and Beanbag Review Board before 1.7.15 when parsing JSON requests allowing an attacker to execute arbitrary Python code...

9.8CVSS9.5AI score0.03649EPSS
SaveExploits0References11Affected Software1
OSV
OSV
•added 2022/04/27 8:15 p.m.•11 views

ALPINE-CVE-2022-24736

Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and...

5.5CVSS6.2AI score0.01498EPSS
SaveExploits1References1
OSV
OSV
•added 2022/04/27 8:15 p.m.•10 views

DEBIAN-CVE-2022-24735

Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the potentially higher privileges of another Redis user. The Lua scri...

7.8CVSS6.8AI score0.02264EPSS
SaveExploits1References1
OSV
OSV
•added 2022/04/27 8:15 p.m.•11 views

ALPINE-CVE-2022-24735

Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the potentially higher privileges of another Redis user. The Lua scri...

7.8CVSS7.2AI score0.02264EPSS
SaveExploits1References1
OSV
OSV
•added 2022/04/27 8:15 p.m.•14 views

UBUNTU-CVE-2022-24736

Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and...

5.5CVSS6.2AI score0.01498EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/27 12:00 a.m.•3 views

CVE-2022-24735: Improper Control of Generation of Code

Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the potentially higher privileges of another Redis user. The Lua scri...

7.8CVSS6.6AI score0.02264EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/04/05 12:00 a.m.•55 views

Remote code execution in Subrion

Subrion is an open source php content management system. A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS3.4AI score0.01415EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/04/05 12:00 a.m.•146 views

GHSA-G54X-29XV-58H5 Remote code execution in Subrion

Subrion is an open source php content management system. A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS8.7AI score0.01415EPSS
SaveExploits1References3
OSV
OSV
•added 2022/04/04 6:15 p.m.•21 views

CVE-2021-43464

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS8.7AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/04 6:15 p.m.•9 views

CVE-2021-43464

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS6AI score0.01415EPSS
SaveExploits1References2
NVD
NVD
•added 2022/04/04 6:15 p.m.•32 views

CVE-2021-43464

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS0.01415EPSS
SaveExploits1References1
Prion
Prion
•added 2022/04/04 6:15 p.m.•29 views

Remote code execution

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

6.5CVSS8.7AI score0.01415EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/04/04 5:28 p.m.•49 views

CVE-2021-43464

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.9AI score0.01415EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/04 12:00 a.m.•5 views

CVE-2021-43464: Undefined Security Weakness

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS7.8AI score0.01415EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/17 4:15 p.m.•20 views

CVE-2020-15591

fexsrv in FEX aka Frams' Fast File EXchange before fex-201609192 allows eval injection for unauthenticated remote code execution...

9.8CVSS7.8AI score
SaveExploits0References3
OSV
OSV
•added 2022/03/17 4:15 p.m.•8 views

DEBIAN-CVE-2020-15591

fexsrv in FEX aka Frams' Fast File EXchange before fex-201609192 allows eval injection for unauthenticated remote code execution...

9.8CVSS8.9AI score0.04058EPSS
SaveExploits1References1
NVD
NVD
•added 2022/03/17 4:15 p.m.•35 views

CVE-2020-15591

fexsrv in FEX aka Frams' Fast File EXchange before fex-201609192 allows eval injection for unauthenticated remote code execution...

9.8CVSS0.04058EPSS
SaveExploits1References3
Prion
Prion
•added 2022/03/17 4:15 p.m.•23 views

Remote code execution

fexsrv in FEX aka Frams' Fast File EXchange before fex-201609192 allows eval injection for unauthenticated remote code execution...

7.5CVSS9.8AI score0.04058EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
•added 2022/03/17 4:15 p.m.•25 views

CVE-2020-15591

fexsrv in FEX aka Frams' Fast File EXchange before fex-201609192 allows eval injection for unauthenticated remote code execution...

9.8CVSS7.4AI score0.04058EPSS
SaveExploits1References3
OSV
OSV
•added 2022/03/17 4:15 p.m.•9 views

UBUNTU-CVE-2020-15591

fexsrv in FEX aka Frams' Fast File EXchange before fex-201609192 allows eval injection for unauthenticated remote code execution...

9.8CVSS7.5AI score0.04058EPSS
SaveExploits1References4
Rows per page
Query Builder