Lucene search
+L

2008 matches found

RubySec
RubySec
•added 2017/09/06 12:00 a.m.•22 views

DoS Vulnerability associated with URI.decode_www_form_component method

The URI.decodewwwformcomponent method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service catastrophic regular expression backtracking, resource consumption, or application crash via a crafted string...

7.5CVSS5.6AI score0.04128EPSS
SaveExploits0References1Affected Software1
osv_debian
osv_debian
•added 2017/01/23 9:59 p.m.•8 views

DEBIAN-CVE-2015-8854

The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service CPU consumption via unspecified vectors that trigger a "catastrophic backtracking issue for the em inline rule," aka a "regular expression denial of service ReDoS."...

7.5CVSS6.8AI score0.04417EPSS
SaveExploits0References1
Prion
Prion
•added 2017/01/23 9:59 p.m.•22 views

Code injection

The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service CPU consumption via unspecified vectors that trigger a "catastrophic backtracking issue for the em inline rule," aka a "regular expression denial of service ReDoS."...

7.8CVSS6.8AI score0.04417EPSS
SaveExploits0References5Affected Software2
osv_ubuntu
osv_ubuntu
•added 2017/01/23 9:59 p.m.•14 views

UBUNTU-CVE-2015-8854

The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service CPU consumption via unspecified vectors that trigger a "catastrophic backtracking issue for the em inline rule," aka a "regular expression denial of service ReDoS."...

7.5CVSS6.7AI score0.04417EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/01/23 9:59 p.m.•33 views

CVE-2015-8854

The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service CPU consumption via unspecified vectors that trigger a "catastrophic backtracking issue for the em inline rule," aka a "regular expression denial of service ReDoS."...

7.8CVSS6.7AI score0.04417EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2016/12/15 6:59 a.m.•12 views

CVE-2016-7869

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to backtrack search functionality. Successful exploitation could lead to arbitrary code execution...

8.8CVSS6.3AI score0.11071EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2015/01/22 12:00 a.m.•10 views

PT-2015-3416 · Marked · Marked

Name of the Vulnerable Software and Affected Versions: marked versions 0.3.3 and earlier Description: The issue is related to errors in resource management, allowing a remote attacker to cause a denial of service. This can be achieved through unspecified vectors that trigger a "catastrophic...

7.8CVSS6.2AI score0.04417EPSS
SaveExploits0References27
osv_mgasa
osv_mgasa
•added 2014/09/26 3:55 p.m.•20 views

MGASA-2014-0389 Updated perl-Email-Address packages fix security vulnerabilities

Updated perl-Email-Address package fixes security vulnerability: The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...

5CVSS6.3AI score0.03584EPSS
SaveExploits2References3
Mageia
Mageia
•added 2014/09/26 3:55 p.m.•82 views

Updated perl-Email-Address packages fix security vulnerabilities

Updated perl-Email-Address package fixes security vulnerability: The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...

5CVSS6.2AI score0.03584EPSS
SaveExploits2References2
Mageia
Mageia
•added 2014/08/05 8:08 p.m.•69 views

Updated file packages fix security vulnerability

file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service CPU consumption via a crafted file that triggers backtracking during processing of an awk rule, due to an incomplete fix for CVE-2013-7345...

5CVSS7.4AI score0.11814EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2014/07/06 11:55 p.m.•14 views

DEBIAN-CVE-2014-4720

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477...

5CVSS7.4AI score0.01864EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2014/07/06 11:55 p.m.•23 views

CVE-2014-4720

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477...

6.3AI score0.01864EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2014/07/06 11:55 p.m.•20 views

UBUNTU-CVE-2014-4720

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477...

5CVSS5.8AI score0.01864EPSS
SaveExploits1References4
Prion
Prion
•added 2014/07/06 11:55 p.m.•24 views

Design/Logic Flaw

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477...

5CVSS7AI score0.03584EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2014/07/06 11:55 p.m.•29 views

CVE-2014-4720

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477...

5CVSS5.9AI score0.01864EPSS
SaveExploits1References3
Mend
Mend
•added 2014/07/06 11:00 p.m.•5 views

CVE-2014-4720

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477...

6.9CVSS0.01864EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2014/07/06 11:00 p.m.•79 views

CVE-2014-4720

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477...

5CVSS7.3AI score0.01864EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2014/07/06 12:00 a.m.•4 views

PT-2014-6073

Name of the Vulnerable Software and Affected Versions Email::Address module versions prior to 1.904 Description The issue allows remote attackers to cause a denial of service due to CPU consumption. This is achieved through vectors related to backtracking into the phrase, which is caused by an...

5CVSS0.01864EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/07/06 12:00 a.m.•8 views

CVE-2014-4720: Undefined Security Weakness

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477...

5CVSS6AI score0.01864EPSS
SaveExploits1References1
NVD
NVD
•added 2014/07/03 2:55 p.m.•49 views

CVE-2014-3538

file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service CPU consumption via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability exists because of an...

5CVSS7.1AI score0.11814EPSS
SaveExploits1References22
Rows per page
Query Builder