Lucene search
+L

10 matches found

osv_suse
osv_suse
•added 2026/02/03 6:08 p.m.•17 views

SUSE-SU-2026:0371-1 Security update for glibc

This update for glibc fixes the following issues: Security fixes: - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow bsc1256766. - CVE-2026-0915: Fixed uninitialized stack buffer used as DNS query name when net==0 in nssdnsgetnetbyaddrr bsc1256822...

8.4CVSS6.8AI score0.00618EPSS
SaveExploits1References8
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/05/30 1:00 a.m.•13 views

Malicious code in safe-query-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11febcd6756020266de031e6231af5b64b843075b41d5a57eee5646f44978a19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/05/30 1:00 a.m.•4 views

Malware in safe-query-buffer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/05/30 1:00 a.m.•18 views

MAL-2025-4603 Malicious code in safe-query-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11febcd6756020266de031e6231af5b64b843075b41d5a57eee5646f44978a19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/01/23 12:00 a.m.•23 views

PT-2022-6331 · Google +4 · Android Kernel +4

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible out of bounds write in the v4l2 m2m querybuf function of v4l2-mem2mem.c due to improper input validation. This could lead to local...

8.8CVSS6.8AI score0.22394EPSS
SaveExploits70References1085
RedHat Linux
RedHat Linux
•added 2021/10/25 5:58 p.m.•34 views

redis: Integer overflow issue with Streams

An integer overflow issue was found in redis. The vulnerability involves changing the default "proto-max-bulk-len" and "client-query-buffer-limit" configuration parameters to very large values and constructing specially crafted large stream elements. This flaw allows a remote attacker to corrupt...

7.5CVSS7.7AI score0.03931EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/10/25 1:19 p.m.•20 views

redis: Integer overflow issue with Streams

An integer overflow issue was found in redis. The vulnerability involves changing the default "proto-max-bulk-len" and "client-query-buffer-limit" configuration parameters to very large values and constructing specially crafted large stream elements. This flaw allows a remote attacker to corrupt...

7.5CVSS7.7AI score0.03931EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/10/13 12:00 a.m.•30 views

Redis Configuration Code Execution

The vulnerability of the Redis database management system’s configuration parameters, proto-max-bulk-len and client-query-buffer-limit, is related to the possibility of integer overflow in the buffer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS6.9AI score0.03931EPSS
SaveExploits0References7Affected Software3
osv_alpine
osv_alpine
•added 2021/10/04 6:15 p.m.•20 views

ALPINE-CVE-2021-32627

Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and...

7.5CVSS8.3AI score0.03931EPSS
SaveExploits0References1
Mend
Mend
•added 2021/10/04 5:35 p.m.•8 views

CVE-2021-32627

Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and...

7.7CVSS0.03931EPSS
SaveExploits0References16
Rows per page
Query Builder