CVE-2024-51737

CVE-2024-51737 affects RediSearch (Redis module) where an authenticated Redis user issuing FT.SEARCH/FT.AGGREGATE with a crafted LIMIT or FT.SEARCH with a crafted KNN argument can trigger an integer overflow, causing heap overflow and potential remote code execution. The issue is fixed in Redis m...

SUSE CVE-2011-0448

Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument...