Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 6:46 a.m.10 views

CVE-2024-36671

nodemcu before v3.0.0-release20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c...

9.8CVSS7.6AI score0.00749EPSS
Exploits0References1
OSV
OSV
added 2024/11/29 3:15 p.m.6 views

CVE-2024-36671

nodemcu before v3.0.0-release20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c...

9.8CVSS7.6AI score
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/11/29 12:0 a.m.5 views

PT-2024-27115 · Nodemcu · Nodemcu

Name of the Vulnerable Software and Affected Versions: nodemcu versions prior to 3.0.0-release 20240225 Description: The issue is related to an integer overflow in the getnum function located at /modules/struct.c. This overflow can be exploited, potentially leading to unintended behavior. No...

9.8CVSS7.3AI score0.00749EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/11/29 12:0 a.m.2 views

NodeMCU 安全漏洞

NodeMCU is a Lua-based open source firmware from NodeMCU Open Source. A security vulnerability exists in NodeMCU version v3.0.0-release20240225, which stems from the getnum function in /modules/struct.c containing an integer overflow...

9.8CVSS6.8AI score0.00749EPSS
Exploits0References5
Cvelist
Cvelist
added 2024/11/29 12:0 a.m.15 views

CVE-2024-36671

nodemcu before v3.0.0-release20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c...

0.00749EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/11/29 12:0 a.m.13 views

CVE-2024-36671

nodemcu before v3.0.0-release20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c...

7.8AI score0.00749EPSS
Exploits0References5
CVE
CVE
added 2024/11/29 12:0 a.m.56 views

CVE-2024-36671

NodeMCU firmware is affected by CVE-2024-36671 due to an integer overflow in the getnum function located at /modules/struct.c, before version 3.0.0-release_20240225. The vulnerability is tied to the NodeMCU v3.x history as described in multiple sources; the issue arises from arithmetic overflow i...

9.8CVSS7.7AI score0.00749EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:49 a.m.4 views

SUSE CVE-2012-0270

Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted 1 hetro file to the getnum function in util/hetimain.c or 2 PVOC file to the getnum function in util/pvimport.c...

7.5CVSS8.2AI score0.54671EPSS
Exploits4References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:12 a.m.4 views

SUSE CVE-2015-8080

Integer overflow in the getnum function in luastruct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox...

7.5CVSS7.8AI score0.05362EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:58 a.m.3 views

SUSE CVE-2020-14147

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

7.7CVSS7.3AI score0.03085EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:0 a.m.6 views

The vulnerability of the getnum() function implementation in the NoSQL Redis database management system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the getnum function implementation in the NoSQL Redis database management system arises from a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code using the scripting language Lua...

7.7CVSS7AI score0.03085EPSS
Exploits0References6Affected Software4
Microsoft CVE
Microsoft CVE
added 2020/08/18 12:0 a.m.3 views

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

...

7.7CVSS7AI score0.05362EPSS
Exploits1
OSV
OSV
added 2020/08/13 3:15 a.m.1 views

DEBIAN-CVE-2020-17538

A buffer overflow vulnerability in GetNumSameData in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

5.5CVSS6.6AI score0.01931EPSS
Exploits1References1
OSV
OSV
added 2020/07/31 11:25 p.m.6 views

MGASA-2020-0312 Updated redis packages fix security vulnerability

An integer overflow in the getnum function in luastruct.c CVE-2020-14147...

7.7CVSS7.8AI score0.03085EPSS
Exploits0References4
OSV
OSV
added 2020/06/15 6:15 p.m.2 views

ALPINE-CVE-2020-14147

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

7.7CVSS7.8AI score0.03085EPSS
Exploits0References1
OSV
OSV
added 2020/06/15 6:15 p.m.8 views

AZL-6842 CVE-2020-14147 affecting package redis for versions less than 5.0.5-7

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

7.7CVSS7.3AI score0.03085EPSS
Exploits0References1
OSV
OSV
added 2020/06/15 6:15 p.m.2 views

DEBIAN-CVE-2020-14147

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

7.7CVSS7.2AI score0.03085EPSS
Exploits0References1
OSV
OSV
added 2020/06/15 6:15 p.m.1 views

UBUNTU-CVE-2020-14147

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

7.7CVSS7.3AI score0.03085EPSS
Exploits0References4
Cvelist
Cvelist
added 2020/06/15 4:52 p.m.26 views

CVE-2020-14147

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

8.1AI score0.03085EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2020/06/15 12:0 a.m.4 views

PT-2020-5440 · Redis +2 · Redis +2

Name of the Vulnerable Software and Affected Versions: Redis versions prior to 6.0.3 Description: The issue is caused by an integer overflow in the getnum function, which allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service or possibly...

9CVSS7.2AI score0.31049EPSS
Exploits3References66
Rows per page
Query Builder