https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:42:52.118810+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04608 bdu:2021-04608 2026-10-03T16:42:52.317734+00:00 bdu:2021-04608 https://cve.radiocsirt.org/vuln/bell-cve-2021-32625 Withdrawn: BELL-CVE-2021-32625 — CVE-2021-32625 does not affect BellSoft software 2026-10-03T16:42:52.317783+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cleanstart-2026-af35851 Withdrawn: CLEANSTART-2026-AF35851 — Redis is an open source, in-memory database that persists on disk 2026-10-03T16:42:52.317810+00:00

Withdrawn by the publisher.

Affected: CleanStart: redis

Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-27981 EUVD-2026-27981 2026-10-03T16:42:52.317853+00:00 EUVD-2026-27981 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32625 fkie_cve-2021-32625 2026-10-03T16:42:52.317873+00:00

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer, could be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This is a result of an incomplete fix by CVE-2021-29477. The problem is fixed in version 6.2.4 and 6.0.14. An additional workaround to mitigate the problem without patching the redis-server executable is to use ACL configuration to prevent clients from using the STRALGO LCS command. On 64 bit systems which have the fixes of CVE-2021-29477 (6.2.3 or 6.0.13), it is sufficient to make sure that the proto-max-bulk-len config parameter is smaller than 2GB (default is 512MB).

 https://cve.radiocsirt.org/vuln/gsd-2021-32625 gsd-2021-32625 2026-10-03T16:42:52.317918+00:00 gsd-2021-32625 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0841-1 openSUSE-SU-2021:0841-1 — Security update for redis 2026-10-03T16:42:52.317936+00:00

Security update for redis

 https://cve.radiocsirt.org/vuln/suse-su-2021:2294-1 SUSE-SU-2021:2294-1 — Security update for redis 2026-10-03T16:42:52.317962+00:00

Security update for redis

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32625 UBUNTU-CVE-2021-32625 2026-10-03T16:42:52.317986+00:00

Affected: Ubuntu:Pro:14.04:LTS: redis, Ubuntu:Pro:16.04:LTS: redis

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer, could be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This is a result of an incomplete fix by CVE-2021-29477. The problem is fixed in version 6.2.4 and 6.0.14. An additional workaround to mitigate the problem without patching the redis-server executable is to use ACL configuration to prevent clients from using the STRALGO LCS command. On 64 bit systems which have the fixes of CVE-2021-29477 (6.2.3 or 6.0.13), it is sufficient to make sure that the proto-max-bulk-len config parameter is smaller than 2GB (default is 512MB).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2458 WID-SEC-W-2023-2458 — Redis: Schwachstelle ermöglicht Codeausführung 2026-10-03T16:42:52.318026+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Redis ausnutzen, um beliebigen Programmcode auszuführen.