Lucene search
+L

113 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/09 12:00 a.m.•3 views

CVE-2021-43519: Uncontrolled Recursion

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

5.5CVSS5.8AI score0.01227EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/09 12:00 a.m.•11 views

Lua 缓冲区错误漏洞

Lua is a lightweight, extensible open source scripting language from the Lua LUA team. A buffer error vulnerability exists in Lua Interpreter that stems from luaresume in the product ldo.c file failing to properly handle data files. An attacker could use this vulnerability to cause a denial of...

5.5CVSS6.4AI score0.01227EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
•added 2021/10/20 12:00 a.m.•11 views

The vulnerability of Lua interpreter in the Redis database management system allows attackers to execute arbitrary code.

The vulnerability of Lua interpreter in the Redis database management system is related to the possibility of buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.2AI score0.16206EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/07/20 12:00 a.m.•13 views

The vulnerability of the ldebug.c component of the Lua script interpreter, related to a numerical loss of significance, allows an attacker to trigger a service failure.

The vulnerability of the ldebug.c component of the Lua script interpreter is related to a numerical loss of significance. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

5.3CVSS6.3AI score0.03833EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/12/15 12:00 a.m.•17 views

The vulnerability of the Lua interpreter used in Cisco IOS XE operating systems allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the Lua interpreter used in Cisco IOS XE operating systems is related to insufficient restrictions on function calls. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

5.2CVSS7.4AI score0.00386EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/10/02 12:00 a.m.•111 views

Cisco IOS XE Software Arbitrary Code Execution (cisco-sa-ios-lua-rce-7VeJX4f)

According to its self-reported version, Cisco IOS XE Software is affected by an arbitrary code execution vulnerability in its Lua interpreter due to insufficient permission checks on Lua function calls. An authenticated, local attacker can exploit this to bypass authentication and execute arbitra...

7.2CVSS8AI score0.00386EPSS
SaveExploits0References3
NVD
NVD
•added 2020/09/24 6:15 p.m.•34 views

CVE-2020-3423

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

7.2CVSS0.00386EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/24 6:15 p.m.•32 views

Buffer overflow

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

7.2CVSS6.8AI score0.00386EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/09/24 6:01 p.m.•53 views

CVE-2020-3423 Cisco IOS XE Software Arbitrary Code Execution Vulnerability

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

5.1CVSS6.8AI score0.00386EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2020/09/24 6:01 p.m.•28 views

CVE-2020-3423 Cisco IOS XE Software Arbitrary Code Execution Vulnerability

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

5.1CVSS7.8AI score0.00386EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/09/24 4:00 p.m.•62 views

Cisco IOS XE Software Arbitrary Code Execution Vulnerability

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

5.1CVSS2.8AI score0.00386EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/24 12:00 a.m.•4 views

CVE-2020-3423: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

7.2CVSS6.9AI score0.00386EPSS
SaveExploits0References3
NVD
NVD
•added 2020/09/23 1:15 a.m.•44 views

CVE-2019-15992

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying Linux operating...

9CVSS0.04122EPSS
SaveExploits0References1
OSV
OSV
•added 2020/09/23 1:15 a.m.•11 views

CVE-2019-15992

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying Linux operating...

7.2CVSS6.1AI score
SaveExploits0References1
Prion
Prion
•added 2020/09/23 1:15 a.m.•24 views

Design/Logic Flaw

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying Linux operating...

9CVSS7.4AI score0.04122EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
•added 2020/09/23 12:27 a.m.•44 views

CVE-2019-15992 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Code Execution Vulnerability

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying Linux operating...

7.2CVSS7.3AI score0.04122EPSS
SaveExploits0References1
CVE
CVE
•added 2020/09/23 12:27 a.m.•114 views

CVE-2019-15992

CVE-2019-15992 is a remote code execution vulnerability in the Lua interpreter used by Cisco ASA and Cisco FTD software. It arises from insufficient restrictions on Lua function calls in user-supplied scripts, which could allow an authenticated, remote attacker to trigger a heap overflow and exec...

9CVSS7.2AI score0.04122EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2020/09/23 12:27 a.m.•22 views

CVE-2019-15992 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Code Execution Vulnerability

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying Linux operating...

7.2CVSS7.9AI score0.04122EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/23 12:00 a.m.•2 views

CVE-2019-15992: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying Linux operating...

9CVSS6.8AI score0.04122EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2019/12/09 12:00 a.m.•16 views

The vulnerability of the Lua interpreter implemented in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) hardware network devices allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the Lua interpreter implemented in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD hardware-based network devices relates to the execution of operations beyond the buffer memory boundaries. Exploiting this vulnerability allows a malicious acto...

9CVSS7.8AI score0.04122EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder