10472 matches found
CVE-2024-51737
CVE-2024-51737 affects RediSearch (Redis module) where an authenticated Redis user issuing FT.SEARCH/FT.AGGREGATE with a crafted LIMIT or FT.SEARCH with a crafted KNN argument can trigger an integer overflow, causing heap overflow and potential remote code execution. The issue is fixed in Redis m...
CVE-2024-51737 RediSearch Integer Overflow with LIMIT or KNN arguments can lead to RCE
RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEARCH or FT.AGGREGATE with a specially crafted LIMIT command argument, or FT.SEARCH with a specially crafted KNN command argument, can trigger an...
CVE-2022-49034
In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar as below when showing /proc/cpuinfo. Fix this by using...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the netem network scheduler failing to properly update its qlen value to reflect changes in the number of...
RediSearch security vulnerability
RediSearch is a Redis module from the RediSearch open source that provides queries, secondary indexes, and full-text searches for Redis. A security vulnerability exists in RediSearch that originates from an authenticated redis user executing FT.SEARCH with a specially crafted LIMIT or KNN command...
CVE-2024-56291
Deserialization of Untrusted Data vulnerability in plainware PlainInventory z-inventory-manager allows Object Injection.This issue affects PlainInventory: from n/a through = 3.1.6...
CVE-2025-22304
CVE-2025-22304 is a Missing Authorization vulnerability in the WP Visitor Statistics (Real Time Traffic) WordPress plugin. The Red Hat/Wordfence references identify an unauthenticated access issue that could allow unauthorized actions or data access; CVSSv3.1 base score 4.3 (Medium) with network ...
CVE-2025-22349 WordPress WordPress Auction Plugin plugin <= 3.7 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Owen Cutajar & Hyder Jaffari WordPress Auction Plugin allows SQL Injection.This issue affects WordPress Auction Plugin: from n/a through 3.7...
CVE-2024-8447 Narayana: deadlock via multiple join requests sent to lra coordinator
A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...
CVE-2022-49035
In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...
DEBIAN-CVE-2022-49035
In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...
CVE-2022-49035 media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...
CVE-2022-49035 media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...
CVE-2022-49035
CVE-2022-49035 in the Linux kernel affects media: s5p_cec by not consistently limiting msg.len to CEC_MAX_MSG_SIZE. Root cause is the len check not enforced in all code paths, potentially enabling a corner-case that could impact availability (per CVSS: LOCAL, HIGH impact to availability; I/I/C = ...
CVE-2022-49035
In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...
PT-2025-52557
Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1:1.39.17-1deb12u1 MediaWiki versions prior to 1:1.43.6+dfsg-1deb13u1 Description Multiple security issues were identified in MediaWiki, a website engine used for collaborative work. These issues could lead to...
PT-2025-53805
Name of the Vulnerable Software and Affected Versions qs versions prior to 6.14.1 Description A flaw exists in the qs parse modules library where the arrayLimit option does not properly enforce limits when using bracket notation in query strings, leading to a potential HTTP Denial of Service DoS...
PT-2026-2872
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the Linux kernel due to the repeated evaluation of arguments within the FAN FROM REG macro. This can lead to divide-by-zero...
PT-2025-42554
Name of the Vulnerable Software and Affected Versions mediawiki affected versions not specified Description The issue involves a rate limit reuse within the ApiFancyCaptchaReload component. This allows for potential abuse of the badcaptcha rate limit. Recommendations At the moment, there is no...
PT-2025-11969
Name of the Vulnerable Software and Affected Versions Suricata versions affected versions not specified Description The issue is related to an infinite loop that can occur with negated pcre and an indefinite recursion limit setting. Recommendations At the moment, there is no information about a...