Lucene search
K

27 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-7217

Malicious code in bioql PyPI...

6.3CVSS4.5AI score0.00317EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2018-16758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man- in-the-middle attack to disable the encryption of VPN...

5.9CVSS5.8AI score0.0011EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/05/04 12:0 a.m.15 views

GLSA-202405-03 : Dalli: Code Injection

The remote host is affected by the vulnerability described in GLSA-202405-03 Dalli: Code Injection - A vulnerability was found in Dalli. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta...

6.3CVSS3.9AI score0.00317EPSS
Exploits1References3
Gentoo Linux
Gentoo Linux
added 2024/05/04 12:0 a.m.25 views

Dalli: Code Injection

Background Dalli is a high performance pure Ruby client for accessing memcached servers. Description A vulnerability was found in Dalli. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation leads to...

6.3CVSS7.2AI score0.00317EPSS
Exploits1
SUSE CVE
SUSE CVE
added 2023/02/15 4:24 a.m.2 views

SUSE CVE-2018-16758

Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets...

5.9CVSS5.8AI score0.0011EPSS
Exploits0References3
OSV
OSV
added 2023/01/06 11:4 a.m.1 views

OESA-2023-1002 rubygem-dalli security update

High performance memcached client for Ruby Security Fixes: A vulnerability was found in Dalli. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation leads to...

6.3CVSS6.7AI score0.00317EPSS
Exploits1References2
Snyk
Snyk
added 2022/11/20 1:31 p.m.1 views

Improper Neutralization

Overview Affected versions of this package are vulnerable to Improper Neutralization in the self.metaset function of the component Meta Protocol Handler. PoC ruby require 'dalli' $mcmeta = Dalli::Client.new'localhost:11211', protocol: :meta $mcmeta.set'xhzeem','meta' $mcmeta.get"xhzeem"...

6.3CVSS6.9AI score0.00317EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2022/11/19 9:30 p.m.21 views

Unsanitized input leading to code injection in Dalli

A vulnerability was found in Dalli. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The name of the patch is...

6.3CVSS5.4AI score0.00317EPSS
Exploits1References7Affected Software1
OSV
OSV
added 2022/11/19 9:30 p.m.19 views

GHSA-3XG8-CC8F-9WV2 Unsanitized input leading to code injection in Dalli

A vulnerability was found in Dalli. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The name of the patch is...

3.7CVSS4.2AI score0.00317EPSS
Exploits1References7
OSV
OSV
added 2022/11/19 7:15 p.m.11 views

CVE-2022-4064

A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...

6.3CVSS4.3AI score
Exploits0References7
NVD
NVD
added 2022/11/19 7:15 p.m.10 views

CVE-2022-4064

A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...

6.3CVSS0.00317EPSS
Exploits1References7
OSV
OSV
added 2022/11/19 7:15 p.m.1 views

UBUNTU-CVE-2022-4064

A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...

6.3CVSS4.3AI score0.00317EPSS
Exploits1References5
Prion
Prion
added 2022/11/19 7:15 p.m.13 views

Design/Logic Flaw

A vulnerability was found in Dalli. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and ma...

2.6CVSS4.5AI score0.00317EPSS
Exploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2022/11/19 7:15 p.m.23 views

CVE-2022-4064

A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...

6.3CVSS4.9AI score0.00317EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/11/19 12:0 a.m.2 views

Dalli 注入漏洞

Dalli is a high-performance pure Ruby client for accessing memcached servers by Peter Goldstein, a personal developer. Dalli suffers from an injection vulnerability that stems from an affected self.metaset function in the lib/dalli/protocol/meta/requestformatter.rb file of the component Meta...

6.3CVSS4.9AI score0.00317EPSS
Exploits1References8
Debian CVE
Debian CVE
added 2022/11/19 12:0 a.m.15 views

CVE-2022-4064

A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...

6.3CVSS4.4AI score0.00317EPSS
Exploits1
Cvelist
Cvelist
added 2022/11/19 12:0 a.m.15 views

CVE-2022-4064 Dalli Meta Protocol request_formatter.rb self.meta_set injection

A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...

6.3CVSS4.9AI score0.00317EPSS
Exploits1References7
CVE
CVE
added 2022/11/19 12:0 a.m.74 views

CVE-2022-4064

Dalli (Ruby memcached client) up to version 3.2.2 is affected by a vulnerability in self.meta_set within lib/dalli/protocol/meta/request_formatter.rb of the Meta Protocol Handler. Manipulating the cas/ttl argument leads to code injection that can be launched remotely. Attacker success probability...

6.3CVSS4.3AI score0.00317EPSS
Exploits1References7Affected Software1
RubySec
RubySec
added 2022/11/19 12:0 a.m.17 views

Unsanitized input leading to code injection in Dalli

A vulnerability was found in Dalli. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The name of the patch is...

6.3CVSS1AI score0.00317EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/10/10 9:29 p.m.1 views

DEBIAN-CVE-2018-16758

Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets...

5.9CVSS5.9AI score0.0011EPSS
Exploits0References1
Rows per page
Query Builder