Lucene search
+L

20 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•18 views

Astra Linux – Vulnerability in Redis

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user could use scripting commands to inject arbitrary information into the response stream for a given client, potentially corrupting or returning tampered data to other users on the same...

8.5CVSS6.9AI score0.00597EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/01 5:42 a.m.•13 views

valkey: Valkey: Remote code execution via use-after-free in stream deserialization

A flaw was found in Valkey, a distributed key-value database. A remote attacker could exploit a use-after-free vulnerability in the RESTORE command. This occurs when a malformed data stream is processed during stream deserialization, causing a shared resource to be improperly managed. If...

8.8CVSS6.5AI score0.0117EPSS
SaveExploits0References16
OSV
OSV
•added 2026/08/24 5:53 a.m.•22 views

BIT-VALKEY-2026-56684 Valkey: TLS pending-data processing use-after-free may allow remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

7.5CVSS6.7AI score0.00888EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/08/18 3:16 p.m.•17 views

CVE-2026-63639

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

8.8CVSS6.7AI score0.0117EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/08/18 3:16 p.m.•17 views

CVE-2026-56684

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

7.5CVSS6.1AI score0.00888EPSS
SaveExploits0References5
OSV
OSV
•added 2024/07/22 8:15 p.m.•17 views

CVE-2024-6122

An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which...

5.5CVSS5.8AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/22 12:00 a.m.•15 views

PT-2024-37398 · National Instruments · Ni Flexlogger +1

Name of the Vulnerable Software and Affected Versions: NI SystemLink Server versions prior to 2024 Q1 NI FlexLogger versions prior to 2023 Q2 Description: An issue with incorrect permissions in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may lead to...

5.5CVSS6.8AI score0.00239EPSS
SaveExploits0References5
CNVD
CNVD
•added 2024/02/28 12:00 a.m.•13 views

Denial of Service Vulnerability in Damon New Cloud Cache Database (DMCDM)

Damon New Cloud Cache Database DMCDM is a self-developed Key-Value database that is deeply compatible with the native Redis protocol. A denial of service vulnerability exists in Damon New Cloud Cache Database DMCDM, which can be exploited by attackers to cause a denial of service...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2023/10/27 12:00 a.m.•18 views

Denial of Service Vulnerability in Damon's New Cloud Cache Database (CNVD-2023-94386)

Damon New Cloud Cache Database DMCDM is a self-developed Key-Value database that is deeply compatible with native Redis. A denial of service vulnerability exists in DMCDM, which can be exploited by attackers to cause a denial of service...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2023/10/26 12:00 a.m.•28 views

Denial of Service Vulnerability in Damon's New Cloud Cache Database

Damon New Cloud Cache Database is a self-developed Key-Value database that is deeply compatible with native Redis. A denial of service vulnerability exists in Damon New Cloud Cache Database, which can be exploited by attackers to cause a program crash...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•19 views

Fedora: Security Advisory for golang-github-cockroachdb-pebble (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/07/30 1:57 a.m.•24 views

[SECURITY] Fedora 36 Update: golang-github-leveldb-0-0.10.20190701git259d925.fc36

The LevelDB key-value database in the Go programming language...

1.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•18 views

Fedora: Security Advisory for golang-github-cockroachdb-pebble (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2022/05/08 12:00 a.m.•23 views

Fedora: Security Advisory for golang-github-cockroachdb-pebble (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
Veracode
Veracode
•added 2022/02/20 2:24 p.m.•102 views

Remote Code Execution

redis is vulnerable to remote code execution. A persistent key-value database is prone to a Debian-specific Lua sandbox escape due to a packaging issue allows an attacker to upload and execute malicious code on the targeted system...

10CVSS8.5AI score0.99351EPSS
SaveExploits12References7Affected Software1
Prion
Prion
•added 2022/02/18 8:15 p.m.•36 views

Remote code execution

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS9.7AI score0.99351EPSS
SaveExploits12References6
CVE
CVE
•added 2022/02/18 7:25 p.m.•1789 views

CVE-2022-0543

CVE-2022-0543 concerns Redis with a Debian-specific Lua sandbox escape packaging issue that can lead to remote code execution. The vulnerability is described as a Debian packaging problem in Redis, enabling a sandbox escape and potential arbitrary code execution on affected systems. Public adviso...

10CVSS8.6AI score0.99351EPSS
SaveIn wildExploits12References7Affected Software1
CNNVD
CNNVD
•added 2021/12/27 12:00 a.m.•21 views

Rust bronzedb-protocol crate安全漏洞

Rust bronzedb-protocol crate is browndb is a kv database. It is a re-export crate. a security vulnerability exists in Rust bronzedb-protocol crate, which stems from the fact that ReadKVExt can read data from an uninitialized memory location. No detailed vulnerability details are available at this...

9.8CVSS5.5AI score0.01191EPSS
SaveExploits0References3
Akamai Blog
Akamai Blog
•added 2021/04/17 4:00 a.m.•20 views

Building an A/B Test with EdgeWorkers and EdgeKV

When paired with our new EdgeKV distributed key-value database, the Akamai EdgeWorkers serverless platform gives you the ability to do powerful things at the CDN level...

3.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2019/07/11 12:00 a.m.•40 views

Debian: Security Advisory (DLA-1850-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.2AI score0.26048EPSS
SaveExploits0References3
Rows per page
Query Builder