Advisories · Technology
Apache Software Foundation Apache Kvrocks.
Every CVE that names Apache Software Foundation Apache Kvrocks among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
Apache Kvrocks: Improper permission for the APPLYBATCH command
- Apache Software Foundation Apache Kvrocks
- CWE-280
- CVSS 2.4 Low
Apache Kvrocks: Replication Fullsync Path Traversal via Unvalidated Filename Handling
- Apache Software Foundation Apache Kvrocks
- Path traversal
- CVSS 5.5 Medium
Apache Kvrocks: Does not remove the unsafe loadstring function from its Lua sandbox, allowing a user who can run EVAL scripts to load crafted, unvalidated bytecode that crashes the server process, re…
- Apache Software Foundation Apache Kvrocks
- CVSS 10.0 CriticalCritical · CVSS 9+
Apache Kvrocks: Stack buffer overflow in Lua bit.tohex()
- Apache Software Foundation Apache Kvrocks
- Memory corruption
- CVSS 6.4 Medium
Apache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoS
- Apache Software Foundation Apache Kvrocks
- Memory corruption
- CVSS 5.3 Medium
Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins
- Apache Software Foundation Apache Kvrocks
- Information disclosure
- CVSS 5.4 Medium
Apache Kvrocks: RESET command grants admin privileges
- Apache Software Foundation Apache Kvrocks
- Privilege escalation
- CVSS 7.5 High
Apache Kvrocks: The server was crashed by the negative offset
- Apache Software Foundation Apache Kvrocks
- CWE-20
- CVSS 6.5 Medium
Apache Kvrocks: Cross-Protocol Scripting Vulnerability
- Apache Software Foundation Apache Kvrocks
- CWE-115