Lucene search
+L

3800 matches found

NVD
NVD
added 2021/11/02 7:15 a.m.17 views

CVE-2021-3765

validator.js is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS0.01666EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2021/11/02 7:15 a.m.29 views

CVE-2021-3765

validator.js is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.4AI score0.01666EPSS
SaveExploits1References3
OSV
OSV
added 2021/11/02 7:15 a.m.7 views

UBUNTU-CVE-2021-3765

validator.js is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.2AI score0.01666EPSS
SaveExploits1References4
CVE
CVE
added 2021/11/02 7:5 a.m.157 views

CVE-2021-3765

CVE-2021-3765 (validator.js) is described in the provided materials as a regular expression denial of service (ReDoS) vulnerability. The technical detail mentioned is a vulnerability in validator.js related to inefficient regular expression complexity, specifically a ReDoS condition triggered by ...

7.5CVSS6.1AI score0.01666EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2021/11/02 7:5 a.m.27 views

CVE-2021-3765

Removed by vendor...

7.5CVSS6.6AI score0.01666EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2021/10/29 4:15 a.m.380 views

Exploit for Code Injection in Gitlab

This is a PoC exploit for CVE-2021-22205, a Gitlab CE/EE RCE Re...

10CVSS9.4AI score0.99731EPSS
SaveExploits30
ICS
ICS
added 2021/10/26 12:0 a.m.89 views

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Fuji Electric Equipment: Tellus Lite V-Simulator, and V-Server Lite Vulnerabilities : Stack-based Buffer Overflow, Out-of-bounds Write, Untrusted Pointer Dereference, Out-of-bounds Read, Access of Uninitialized Pointer,...

7.8CVSS8.3AI score0.00978EPSS
SaveExploits0References5
NVD
NVD
added 2021/10/21 8:15 p.m.28 views

CVE-2021-41168

Snudown is a reddit-specific fork of the Sundown Markdown parser used by GitHub, with Python integration added. In affected versions snudown was found to be vulnerable to denial of service attacks to its reference table implementation. References written in markdown referencename:...

6.5CVSS0.00765EPSS
SaveExploits1References2
Prion
Prion
added 2021/10/21 8:15 p.m.19 views

Design/Logic Flaw

Snudown is a reddit-specific fork of the Sundown Markdown parser used by GitHub, with Python integration added. In affected versions snudown was found to be vulnerable to denial of service attacks to its reference table implementation. References written in markdown referencename:...

4CVSS6.3AI score0.00765EPSS
SaveExploits1References2Affected Software1
ICS
ICS
added 2021/10/21 12:0 a.m.46 views

ICONICS GENESIS64 and Mitsubishi Electric MC Works64

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: ICONICS, Mitsubishi Electric Equipment: ICONICS GENESIS64, Mitsubishi Electric MC Works64 Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities may...

7.8CVSS5.4AI score0.02743EPSS
SaveExploits0References5
Code423n4
Code423n4
added 2021/10/13 12:0 a.m.22 views

Wrong keeper reward computation

Handle cmichel Vulnerability details The PoolKeeper.keeperReward computation mixes WADs and Quads which leads to issues. 1. Note that keeperTip returns values where 1 = 1%, and 100 = 100%, the same way BASETIP = 5 = 5%. Thus tipPercent = ABDKMathQuad.fromUIntkeeperTip is a Quad value of this keep...

6.8AI score
SaveExploits0
Prion
Prion
added 2021/10/07 11:15 p.m.25 views

Design/Logic Flaw

Zulip is an open source team chat server. In affected versions Zulip allows organization administrators on a server to configure "linkifiers" that automatically create links from messages that users send, detected via arbitrary regular expressions. Malicious organization administrators could...

4CVSS6.5AI score0.01737EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/10/05 12:0 a.m.7 views

Zulip server 安全漏洞

Zulip server is an open source team chat application from Zulip, Inc. in the United States. Zulip server has a security vulnerability that allows administrators of malicious organizations to subject the server to a denial of service via a regular expression complexity attack...

6.5CVSS6.5AI score0.01737EPSS
SaveExploits1References5
OSV
OSV
added 2021/09/29 5:12 p.m.3 views

GHSA-X55W-VJJP-222R inflect vulnerable to Inefficient Regular Expression Complexity

inflect is customizable inflections for nodejs. inflect is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.4AI score0.01222EPSS
SaveExploits1References4
NVD
NVD
added 2021/09/27 1:15 p.m.32 views

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS0.01418EPSS
SaveExploits1References2
NVD
NVD
added 2021/09/27 1:15 p.m.24 views

CVE-2021-3820

inflect is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS0.01222EPSS
SaveExploits1References2
OSV
OSV
added 2021/09/27 1:15 p.m.19 views

CVE-2021-3820

inflect is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.5AI score
SaveExploits0References2
OSV
OSV
added 2021/09/27 1:15 p.m.21 views

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.6AI score
SaveExploits0References2
NVD
NVD
added 2021/09/27 1:15 p.m.32 views

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS0.01703EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/09/27 1:15 p.m.6 views

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.1AI score0.01703EPSS
SaveExploits1References3
Rows per page
Query Builder