30 matches found
CVE-2021-40895
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
CVE-2024-40895
creationtimestamp| type| source ---|---|--- 2024-07-30 12:24:02+00:00| seen| https://t.me/cvedetector/2028...
CVE-2024-40895
FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the...
CVE-2023-40895
creationtimestamp| type| source ---|---|--- 2023-08-24 22:13:27+00:00| seen| https://t.me/cibsecurity/69134...
CVE-2023-40895
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg...
CVE-2023-40895
The CVE-2023-40895 entry affects Tenda AC8, specifically version v4 US_AC8V4.0si_V16.03.34.06_cn. The issue is described as a stack overflow in the /goform/SetVirtualServerCfg parameter handling. Publicly documented sources consistently note a stack overflow could impact the device’s application ...
CVE-2022-40895
CVE-2022-40895 affects NeDi’s web UI login and Community login, where an insecure design in the forgot-password flow enables unauthenticated, remote user enumeration and brute-force attempts against valid usernames. Reported impact is integrity compromise for affected devices; attack vector is ne...
CVE-2021-40895
creationtimestamp| type| source ---|---|--- 2022-06-27 14:34:56+00:00| seen| https://t.me/cibsecurity/45171...
CVE-2021-40895
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
CVE-2021-40895
CVE-2021-40895 affects todo-regex v0.1.1 and is a Regular Expression Denial of Service (ReDOS) vulnerability triggered by crafted invalid TODO statements. Impact is denial of service; no exploit details provided beyond this. Remediation suggestion found in PT-2022-11323: for v0.1.1, update to a n...