Lucene search
+L

10472 matches found

CVE
CVE
•added 2025/01/08 3:27 p.m.•75 views

CVE-2024-51737

CVE-2024-51737 affects RediSearch (Redis module) where an authenticated Redis user issuing FT.SEARCH/FT.AGGREGATE with a crafted LIMIT or FT.SEARCH with a crafted KNN argument can trigger an integer overflow, causing heap overflow and potential remote code execution. The issue is fixed in Redis m...

7CVSS7.4AI score0.00394EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/01/08 3:27 p.m.•33 views

CVE-2024-51737 RediSearch Integer Overflow with LIMIT or KNN arguments can lead to RCE

RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEARCH or FT.AGGREGATE with a specially crafted LIMIT command argument, or FT.SEARCH with a specially crafted KNN command argument, can trigger an...

7CVSS0.00394EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/01/08 2:19 p.m.•9 views

CVE-2022-49034

In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar as below when showing /proc/cpuinfo. Fix this by using...

5.5CVSS6.8AI score0.00248EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/08 12:00 a.m.•11 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the netem network scheduler failing to properly update its qlen value to reflect changes in the number of...

5.5CVSS7AI score0.00273EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2025/01/08 12:00 a.m.•23 views

RediSearch security vulnerability

RediSearch is a Redis module from the RediSearch open source that provides queries, secondary indexes, and full-text searches for Redis. A security vulnerability exists in RediSearch that originates from an authenticated redis user executing FT.SEARCH with a specially crafted LIMIT or KNN command...

7CVSS5.5AI score0.00394EPSS
SaveExploits1References3
NVD
NVD
•added 2025/01/07 11:15 a.m.•13 views

CVE-2024-56291

Deserialization of Untrusted Data vulnerability in plainware PlainInventory z-inventory-manager allows Object Injection.This issue affects PlainInventory: from n/a through = 3.1.6...

8.1CVSS0.00438EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/07 10:48 a.m.•63 views

CVE-2025-22304

CVE-2025-22304 is a Missing Authorization vulnerability in the WP Visitor Statistics (Real Time Traffic) WordPress plugin. The Red Hat/Wordfence references identify an unauthenticated access issue that could allow unauthorized actions or data access; CVSSv3.1 base score 4.3 (Medium) with network ...

4.3CVSS7.2AI score0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/07 10:48 a.m.•9 views

CVE-2025-22349 WordPress WordPress Auction Plugin plugin <= 3.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Owen Cutajar & Hyder Jaffari WordPress Auction Plugin allows SQL Injection.This issue affects WordPress Auction Plugin: from n/a through 3.7...

7.6CVSS7.9AI score0.00489EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/02 8:19 p.m.•15 views

CVE-2024-8447 Narayana: deadlock via multiple join requests sent to lra coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

5.9CVSS6.9AI score0.00681EPSS
SaveExploits0References6
NVD
NVD
•added 2025/01/02 3:15 p.m.•27 views

CVE-2022-49035

In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...

5.5CVSS0.00207EPSS
SaveExploits0References8
osv_debian
osv_debian
•added 2025/01/02 3:15 p.m.•11 views

DEBIAN-CVE-2022-49035

In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...

5.5CVSS5.7AI score0.00207EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/01/02 2:38 p.m.•20 views

CVE-2022-49035 media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE

In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...

5.5CVSS6.1AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2025/01/02 2:38 p.m.•34 views

CVE-2022-49035 media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE

In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...

0.00207EPSS
SaveExploits0References8
CVE
CVE
•added 2025/01/02 2:38 p.m.•154 views

CVE-2022-49035

CVE-2022-49035 in the Linux kernel affects media: s5p_cec by not consistently limiting msg.len to CEC_MAX_MSG_SIZE. Root cause is the len check not enforced in all code paths, potentially enabling a corner-case that could impact availability (per CVSS: LOCAL, HIGH impact to availability; I/I/C = ...

5.5CVSS7AI score0.00207EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
•added 2025/01/02 2:38 p.m.•20 views

CVE-2022-49035

In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...

5.5CVSS5.7AI score0.00207EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•8 views

PT-2025-52557

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1:1.39.17-1deb12u1 MediaWiki versions prior to 1:1.43.6+dfsg-1deb13u1 Description Multiple security issues were identified in MediaWiki, a website engine used for collaborative work. These issues could lead to...

6.4AI score0.00247EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•20 views

PT-2025-53805

Name of the Vulnerable Software and Affected Versions qs versions prior to 6.14.1 Description A flaw exists in the qs parse modules library where the arrayLimit option does not properly enforce limits when using bracket notation in query strings, leading to a potential HTTP Denial of Service DoS...

7.8CVSS6.5AI score0.0045EPSS
SaveExploits1References48
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2026-2872

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the Linux kernel due to the repeated evaluation of arguments within the FAN FROM REG macro. This can lead to divide-by-zero...

5.5CVSS5.7AI score0.00105EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•12 views

PT-2025-42554

Name of the Vulnerable Software and Affected Versions mediawiki affected versions not specified Description The issue involves a rate limit reuse within the ApiFancyCaptchaReload component. This allows for potential abuse of the badcaptcha rate limit. Recommendations At the moment, there is no...

6.4AI score0.00405EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2025-11969

Name of the Vulnerable Software and Affected Versions Suricata versions affected versions not specified Description The issue is related to an infinite loop that can occur with negated pcre and an indefinite recursion limit setting. Recommendations At the moment, there is no information about a...

7.5CVSS6.2AI score0.00874EPSS
SaveExploits1References58
Rows per page
Query Builder