CVE-2021-31294

CVE-2021-31294 : Redis before 6cbea7d allows a replica to trigger an assertion failure on a primary server by sending a non-administrative command (specifically, SET). The issue is resolved in Redis 6.2.x and 7.x (2021). Affected line: Redis pre-6.2 safety guarantees did not apply. Practical impa...

The vulnerability of the set_cmnd_path() function in the Sudo system administration program, which allows a hacker to cause a service failure.

The vulnerability of the setcmndpath function in the Sudo system administration program is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Microsoft CMD.EXE Integer Overflow

Hi @ll, the subject says it all: a 25 year old TRIVIAL signed integer arithmetic bug which may well have earned a PhD now crashes Windows' command interpreter CMD.exe via its builtin SET command. See their documentation: Classification CWE-190: Integer Overflow or Wraparound CWE-248: Uncaught...

CVE-2021-32761

Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis BIT command are vulnerable to integer overflow that...

Improper Control of Dynamically-Managed Code Resources in config-shield

scripts/cli.js in the GoDaddy node-config-shield aka Config Shield package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data...

CVE-2021-26276

scripts/cli.js in the GoDaddy node-config-shield aka Config Shield package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data...

CVE-2021-26276

scripts/cli.js in the GoDaddy node-config-shield aka Config Shield package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data...

CVE-2021-26276

scripts/cli.js in the GoDaddy node-config-shield aka Config Shield package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data...

CVE-2021-26276

scripts/cli.js in the GoDaddy node-config-shield aka Config Shield package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data...

PT-2021-16986 · Npm · Node-Config-Shield

Name of the Vulnerable Software and Affected Versions: node-config-shield versions prior to 0.2.2 Description: The issue concerns the node-config-shield package, where the scripts/cli.js file calls eval when processing a set command. This could potentially lead to issues if the set command is use...

GoDaddy Node-config-shield Security Vulnerability

GoDaddy Node-config-shield is a Javascript-based codebase for checking sensitive information in projects by GoDaddy, Inc. A security vulnerability exists in GoDaddy node-config-shield that stems from a call to eval while processing the set command...

Command injection

In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow...

CVE-2019-8996

In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow...

PT-2019-19299 · Signiant · Signiant Manager+Agents

Name of the Vulnerable Software and Affected Versions: Signiant Manager+Agents versions prior to 13.5 Description: The issue is related to a Buffer Overflow in the implementation of the set command. Recommendations: For versions prior to 13.5, update to version 13.5 or later to resolve the issue...

CVE-2019-8996: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow...

PT-2018-14805 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3 Description: A issue has been found in the software, which is a SEGV in ControlObjectClient setCommandTerminationHandler in client/client control.c. This issue is disputed by the software maintainer as it requires...

Rockwell Automation Allen Bradley Micrologix 1400 Series B FRN Denial of Service Vulnerability (CNVD-2018-07294)

Allen Bradley Micrologix 1400 Series B is a programmable logic controller from Rockwell Automation. A denial of service vulnerability exists in the handling of the snmp-set command in Allen Bradley Micrologix 1400 Series B version 21.2 and lower. An attacker could exploit this vulnerability by...

CVE-2016-8339

A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG S...

Buffer overflow

A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG S...

CVE-2016-8339

A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG S...