Lucene search
K

12 matches found

Oracle linux
Oracle linux
added 2025/01/28 12:0 a.m.23 views

redis security update

6.2.17-1 -- rebase to 6.2.17 for CVE-2024-46981 6.2.16-1 - rebase to 6.2.16 RHEL-26627...

8.8CVSS7.3AI score0.80733EPSS
Exploits4
OSV
OSV
added 2024/10/12 11:9 a.m.1 views

OESA-2024-2230 redis security update

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its...

8.8CVSS8AI score0.55755EPSS
Exploits1References4
OSV
OSV
added 2024/10/07 8:15 p.m.0 views

UBUNTU-CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

8.8CVSS6.9AI score0.55755EPSS
Exploits1References5
OSV
OSV
added 2022/05/17 3:59 a.m.7 views

GHSA-3F58-74QW-PH75 TYPO3 allows remote attackers to embed Flash videos from external domain

The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."...

6.1CVSS6.9AI score0.00274EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2020/11/10 12:0 a.m.31 views

Debian DLA-2441-1 : sympa security update

A privilege escalation was discovered in Sympa, a modern mailing list manager. It is fixed when Sympa is used in conjunction with common MTAs such as Exim or Postfix by disabling a setuid executable, although no fix is currently available for all environments such as sendmail. Additionally, an...

7.8CVSS6.5AI score0.00624EPSS
Exploits0References5
OSV
OSV
added 2018/09/06 6:29 p.m.17 views

CVE-2018-1000671

sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site 'Open Redirect' vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's...

6.1CVSS5.7AI score
Exploits0References4
Prion
Prion
added 2018/09/06 6:29 p.m.20 views

Open redirect

sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site 'Open Redirect' vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's...

5.8CVSS6.2AI score0.00624EPSS
Exploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2018/09/06 6:29 p.m.20 views

CVE-2018-1000671

sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site 'Open Redirect' vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's...

6.1CVSS6.6AI score0.00624EPSS
Exploits0References4
NVD
NVD
added 2018/09/06 6:29 p.m.12 views

CVE-2018-1000671

sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site 'Open Redirect' vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's...

6.1CVSS6.2AI score0.00624EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2018/09/06 6:0 p.m.30 views

CVE-2018-1000671

sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site 'Open Redirect' vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's...

6.1CVSS6.4AI score0.00624EPSS
Exploits0
Debian
Debian
added 2018/09/05 7:56 p.m.21 views

[SECURITY] [DSA 4285-1] sympa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4285-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 05, 2018 https://www.debian.org/security/faq -...

7.5CVSS1.7AI score0.00447EPSS
Exploits0
CNVD
CNVD
added 2016/01/12 12:0 a.m.1 views

TYPO3 Indexed Search Component Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Indexed Search indexedsearch is one of the extension plugins that provides indexing and searching capabilities. A cross-site scripting vulnerability exists in the search...

5.4CVSS6.1AI score0.00187EPSS
Exploits0References1
Rows per page
Query Builder