Lucene search
+L

4097 matches found

Cvelist
Cvelist
•added 2024/06/27 12:00 a.m.•38 views

CVE-2024-39207

lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmemwrite function...

0.00523EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/06/27 12:00 a.m.•13 views

PT-2024-28387 · Lua-Shmem · Lua-Shmem

Name of the Vulnerable Software and Affected Versions: lua-shmem version 1.0-1 Description: A buffer overflow issue was discovered in lua-shmem via the shmem write function. Recommendations: For lua-shmem version 1.0-1, consider disabling the shmem write function until a patch is available...

8.2CVSS7.8AI score0.00523EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/06/27 12:00 a.m.•18 views

luci-app-lucky security vulnerability

luci-app-lucky is a LuCI application designed for OpenWrt firmware by the individual developer gdy666. A security vulnerability exists in luci-app-lucky version v2.8.3, which stems from the use of hard-coded credentials...

9.8CVSS6.9AI score0.00581EPSS
SaveExploits0References3
Mend
Mend
•added 2024/06/27 12:00 a.m.•3 views

CVE-2024-39207

lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmemwrite function...

8.8CVSS0.00523EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/27 12:00 a.m.•65 views

CVE-2024-39207

The software lua-shmem version 1.0-1 contains a buffer overflow vulnerability within the shmem_write function. This issue is characterized as a buffer copy without checking the size of the input (CWE-120), which can lead to a high impact on availability. While no specific exploit code or informat...

8.2CVSS7.9AI score0.00523EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/27 12:00 a.m.•3 views

CVE-2024-39207: Buffer Copy without Checking Size of Input

lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmemwrite function...

8.2CVSS6.1AI score0.00523EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:49 p.m.•12 views

Malicious code in lua-circuit-breaker (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv-mal
osv-mal
•added 2024/06/25 12:49 p.m.•14 views

MAL-2024-2641 Malicious code in lua-circuit-breaker (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Rosalinux
Rosalinux
•added 2024/06/17 8:56 a.m.•42 views

Advisory ROSA-SA-2024-2431

Software: lua 5.3.4 OS: ROSA Virtualization 2.1 packageevrstring: lua-5.3.4 CVE-ID: CVE-2021-43519 BDU-ID: None CVE-Crit: N/A CVE-DESC.: Stack overflow in luaresume of the ldo.c file in Lua Interpreter allows attackers to perform a denial of service via a script file created. CVE-STATUS: Not...

5.5CVSS7AI score0.01227EPSS
SaveExploits1
osv-opensuse
osv-opensuse
•added 2024/06/15 12:00 a.m.•8 views

OPENSUSE-SU-2024:10163-1 lua-rrdtool-1.6.0-1.1 on GA media

These are all security issues fixed in the lua-rrdtool-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

5CVSS6.8AI score0.1059EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2024/06/04 12:57 p.m.•16 views

SUSE CVE-2021-32672

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger's protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or newer...

3.1CVSS6.5AI score0.01793EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•28 views

RHEL 7 : lua (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - lua: overflow flaw in vararg functions CVE-2014-5461 Note that Nessus has not tested for this issue but has instead...

5CVSS7.5AI score0.12029EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•20 views

RHEL 6 : lua (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - lua: overflow flaw in vararg functions CVE-2014-5461 Note that Nessus has not tested for this issue but has instead...

5CVSS7.1AI score0.12029EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•42 views

RHEL 8 : redis (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - redis: Redis SORTRO may bypass ACL configuration CVE-2023-41053 Note that Nessus has not tested for this issue but...

3.3CVSS6.9AI score0.0029EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2024/05/31 5:00 p.m.•20 views

Mysterious Cyber Attack Took Down 600,000+ Routers in the U.S.

More than 600,000 small office/home office SOHO routers are estimated to have been bricked and taken offline following a destructive cyber attack staged by unidentified cyber actors, disrupting users' access to the internet. The mysterious event, which took place between October 25 and 27, 2023,...

7.6AI score
SaveExploits0
NVD
NVD
•added 2024/05/20 6:15 p.m.•39 views

CVE-2024-31714

Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the Lua library component...

7.5CVSS6.5AI score0.00424EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/20 5:17 p.m.•133 views

CVE-2024-31714

A Buffer Overflow vulnerability exists in Waxlab wax versions v.0.9-3 and before . This flaw resides in the Lua library component and can be exploited by an attacker to cause a denial of service (DoS) . While technical details regarding a specific fix are not provided, a temporary workaround is t...

7.5CVSS6.7AI score0.00424EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/20 5:17 p.m.•41 views

CVE-2024-31714

Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the Lua library component...

6.5AI score0.00424EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/20 5:17 p.m.•23 views

CVE-2024-31714

Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the Lua library component...

6.8AI score0.00424EPSS
SaveExploits0References1
Mend
Mend
•added 2024/05/20 5:17 p.m.•6 views

CVE-2024-31714

Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the Lua library component...

8.7CVSS0.00424EPSS
SaveExploits0References1
Rows per page
Query Builder