Lucene search
+L

16 matches found

Tenable Nessus
Tenable Nessus
β€’added 2026/08/03 12:0 a.m.β€’7 views

TencentOS Server 4: redis (TSSA-2026:0773)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0773 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

8.8CVSS8AI score0.03301EPSS
SaveExploits2References3
RedHat Linux
RedHat Linux
β€’added 2026/06/30 9:46 a.m.β€’16 views

redis: Remote code execution via use-after-free in Lua scripting

A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disable...

8.8CVSS5.7AI score0.02805EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
β€’added 2026/06/16 1:39 p.m.β€’13 views

redis: Remote code execution via use-after-free in Lua scripting

A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disable...

8.8CVSS5.5AI score0.02805EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
β€’added 2026/06/15 10:18 a.m.β€’20 views

redis: Remote code execution via use-after-free in Lua scripting

A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disable...

8.8CVSS5.5AI score0.02805EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
β€’added 2026/06/11 10:5 a.m.β€’12 views

redis: Remote code execution via use-after-free in Lua scripting

A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disable...

8.8CVSS5.6AI score0.02805EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
β€’added 2026/05/26 4:50 p.m.β€’15 views

CVE-2026-23631

A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disable...

8.8CVSS5.7AI score0.02805EPSS
SaveExploits0References5
OSV
OSV
β€’added 2026/05/09 12:32 p.m.β€’18 views

OESA-2026-2237 redis security update

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: When a blocked client is evicted while re-executing a blocked command, an authenticated user may trigger a use-after-free and...

8.8CVSS6.4AI score0.03301EPSS
SaveExploits7References4
OSV
OSV
β€’added 2026/05/07 8:42 a.m.β€’16 views

BIT-KEYDB-2026-23631 redis-server Lua use-after-free may allow remote code execution

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remo...

8.8CVSS6.1AI score0.02805EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
β€’added 2026/05/07 2:22 a.m.β€’17 views

SUSE CVE-2026-23631

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remo...

7.5CVSS6.1AI score0.02805EPSS
SaveExploits0References13
OSV
OSV
β€’added 2026/05/05 5:17 p.m.β€’11 views

ALPINE-CVE-2026-23631

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remo...

8.1CVSS6.1AI score0.02805EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
β€’added 2026/05/05 4:39 p.m.β€’5 views

CVE-2026-23631

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remo...

6.1CVSS6.1AI score0.02805EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
β€’added 2026/05/05 4:39 p.m.β€’19 views

CVE-2026-23631

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remo...

8.8CVSS6.1AI score0.02805EPSS
SaveExploits0
AlpineLinux
AlpineLinux
β€’added 2026/05/05 4:39 p.m.β€’23 views

CVE-2026-23631

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remo...

8.8CVSS6.1AI score0.02805EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
β€’added 2026/05/05 4:39 p.m.β€’8 views

CVE-2026-23631 redis-server Lua use-after-free may allow remote code execution

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remo...

6.1CVSS6.1AI score0.02805EPSS
SaveExploits0References2
CVE
CVE
β€’added 2026/05/05 4:39 p.m.β€’100 views

CVE-2026-23631

CVE-2026-23631 affects the Redis server when using Lua scripting. An authenticated attacker can abuse the master–replica synchronization to trigger a use-after-free on replicas with replica-read-only disabled (or that can be disabled), potentially enabling remote code execution. The issue is miti...

8.8CVSS6.1AI score0.02805EPSS
SaveExploits0References12Affected Software1
Cvelist
Cvelist
β€’added 2026/05/05 4:39 p.m.β€’54 views

CVE-2026-23631 redis-server Lua use-after-free may allow remote code execution

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remo...

6.1CVSS0.02805EPSS
SaveExploits0References2
Rows per page
Query Builder