Lucene search
+L

2 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/01/09 12:0 a.m.23 views

Redis Stack Lua Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Redis Stack. Authentication is required to exploit this vulnerability. The specific flaw exists within the Lua module. The issue results from the lack of validating the existence of an object prior t...

7.2CVSS9AI score0.15009EPSS
SaveExploits2References1
OSV
OSV
added 2022/04/28 8:34 a.m.11 views

USN-5371-2 nginx vulnerability

USN-5371-1 fixed several vulnerabilities in nginx. This update provides the fix for CVE-2021-3618 for Ubuntu 22.04 LTS. Original advisory details: It was discovered that nginx Lua module mishandled certain inputs. An attacker could possibly use this issue to perform an HTTP Request Smuggling...

7.4CVSS7.1AI score0.02036EPSS
SaveExploits0References2
Rows per page
Query Builder