Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-3320

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00171EPSS
Exploits0References7
Prion
Prion
added 2023/12/20 2:15 p.m.8 views

Design/Logic Flaw

Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS Regular expression Denial of Service vulnerability has been identified in Sentry's Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading...

5CVSS6.9AI score0.00171EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/12/20 1:53 p.m.15 views

CVE-2023-50249 Sentry's Astro SDK vulnerable to ReDoS

Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS Regular expression Denial of Service vulnerability has been identified in Sentry's Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading...

7.5CVSS7.3AI score0.00171EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2023/12/18 8:0 p.m.14 views

Sentry's Astro SDK vulnerable to ReDoS

Impact A ReDoS Regular expression Denial of Service vulnerability has been identified in Sentry's Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading to denial of service DoS. Applications that are...

7.5CVSS6.8AI score0.00171EPSS
Exploits0References7Affected Software1
OpenVAS
OpenVAS
added 2023/07/25 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2419)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.3AI score0.01853EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2023/05/17 12:0 a.m.41 views

CentOS 8 : curl (CESA-2023:2963)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:2963 advisory. - When curl is used to retrieve and parse cookies from a HTTPS server, itaccepts cookies using control codes that when later are sent back to a...

5.9CVSS6.6AI score0.00289EPSS
Exploits2References3
OSV
OSV
added 2023/02/09 8:15 p.m.1 views

AZL-13280 CVE-2022-43552 affecting package cmake for versions less than 3.21.4-13

A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can and often do deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocat...

5.9CVSS6.7AI score0.00104EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/11/07 12:0 a.m.5 views

PT-2022-7575 · Curl +11 · Curl +11

Name of the Vulnerable Software and Affected Versions: curl versions prior to 7.87.0 Description: A use after free vulnerability exists in curl. The issue arises when curl is asked to tunnel virtually all protocols it supports through an HTTP proxy, and the proxy denies such tunnel operations for...

9.8CVSS6.2AI score0.14797EPSS
Exploits21References200
Rows per page
Query Builder