PT-2021-28163

Name of the Vulnerable Software and Affected Versions: OpenSSL affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state indicates the involvement of specific functions: sc pkcs15emu oberthur add pubkey, sc oberthur parse publicinfo, and s...

4talent-questions-shortlist (1.3.3), @42.nl/ui (>=1.0.7, <=1.0.9) +624 more potentially affected by CVE-2021-23346 via html-parse-stringify2 (2.0.1)

html-parse-stringify2 NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on html-parse-stringify2 and may be impacted: - 4talent-questions-shortlist 1.3.3 - @42.nl/ui =1.0.7, =5.0.1, =0.1.0, =1.0.0, =0.2.0-alpha.1, =0.1.2, =0.9.9, =0.9.9,...

GHSA-545Q-3FG6-48M7 html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process...

html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process...

PT-2021-18545

Name of the Vulnerable Software and Affected Versions parse duration crate versions through 2021-03-18 Description The issue allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent. This is possible because the parse duration::parse...

The vulnerability in the `parse_cookies_header` function of the `utils.rb` module in the Rack web server and web application interface allows a attacker to compromise data integrity.

The vulnerability of the parsecookiesheader function in the utils.rb module of the Rack web server and web application interface is related to the lack of a mechanism for checking input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node recursively, which will consume stack space and lead to a crash...

PT-2021-4098 · Libyang +2 · Libyang +2

Name of the Vulnerable Software and Affected Versions: libyang versions prior to 1.0.225 Description: The issue is related to a stack overflow in the libyang library, which can cause a denial of service. This occurs due to uncontrolled recursion of the lyxml parse elem function when lyxml parse m...

Regular Expression Denial Of Service (ReDoS)

html-parse-stringify2 is vulnerable to regular express denial of service ReDoS. The vulnerability exists through the regular expression of tagRE where parsing strings with multiple ' and " can consume huge amount of CPU resources...

systemd:fuzz-systemctl-parse-argv: Heap-use-after-free in user_and_machine_equivalent

Detailed Report: https://oss-fuzz.com/testcase?key=5876397522419712 Project: systemd Fuzzing Engine: afl Fuzz Target: fuzz-systemctl-parse-argv Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6040001fdf20 Crash State: userandmachineequivalent...

CVE-2021-23346

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process...

CVE-2021-23346

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process...

CVE-2021-23346 Regular Expression Denial of Service (ReDoS)

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process...

CVE-2021-23346

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process...

CVE-2021-23346

CVE-2021-23346 affects Node.js packages html-parse-stringify and html-parse-stringify2. The vulnerability is a Regular Expression DoS (ReDoS) due to backtracking in parsing regex, which can cause the process to freeze and lead to a denial of service. IBM IBM Cloud Pak for Security CP4S versions 1...

CVE-2021-23346

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process...

CVE-2021-23346: Undefined Security Weakness

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process...

PT-2021-15450

Name of the Vulnerable Software and Affected Versions html-parse-stringify versions prior to 2.0.1 html-parse-stringify2 affected versions not specified Description The issue arises when certain input is sent, causing one of the regular expressions used for parsing to backtrack, which can freeze...

html-parse-stringify 安全漏洞

Henrik Joreteg html-parse-stringify is an open source application by Henrik Joreteg. It provides a way to quickly parse HTML into an AST and stringify it to a raw string. A security vulnerability exists in html-parse-stringify before 2.0.1, which stems from the fact that sending certain inputs ma...

Denial of Service (DoS)

Overview github.com/pires/go-proxyproto is a Go library implementation of the PROXY protocol, versions 1 and 2. Affected versions of this package are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It wi...