Lucene search
+L

5301 matches found

OSV
OSV
•added 2022/12/30 12:15 p.m.•16 views

DEBIAN-CVE-2018-25060

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of a...

7.5CVSS3.8AI score0.00519EPSS
SaveExploits0References1
Prion
Prion
•added 2022/12/30 12:15 p.m.•17 views

Design/Logic Flaw

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of a...

5CVSS7.4AI score0.00519EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/12/30 11:47 a.m.•50 views

CVE-2018-25060 Macaron csrf csrf.go missing secure attribute

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of a...

3.7CVSS7.5AI score0.00519EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/12/27 9:30 a.m.•39 views

email-existence Inefficient Regular Expression Complexity vulnerability

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is...

7.5CVSS3.5AI score0.00721EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/12/27 9:30 a.m.•34 views

GHSA-J5P7-JF4Q-742Q markdown-it vulnerable to Inefficient Regular Expression Complexity

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

7.5CVSS5.5AI score0.00946EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/12/27 9:30 a.m.•34 views

markdown-it vulnerable to Inefficient Regular Expression Complexity

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

7.5CVSS7.4AI score0.00946EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/12/27 9:15 a.m.•21 views

CVE-2018-25049

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is...

7.5CVSS7.5AI score
SaveExploits0References4
NVD
NVD
•added 2022/12/27 9:15 a.m.•23 views

CVE-2015-10005

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

7.5CVSS0.00946EPSS
SaveExploits0References4
NVD
NVD
•added 2022/12/27 9:15 a.m.•31 views

CVE-2018-25049

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is...

7.5CVSS0.00721EPSS
SaveExploits0References4
Prion
Prion
•added 2022/12/27 9:15 a.m.•27 views

Design/Logic Flaw

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

5CVSS7.1AI score0.00946EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2022/12/27 9:15 a.m.•24 views

Design/Logic Flaw

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is...

5CVSS7.5AI score0.00721EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/12/27 9:15 a.m.•29 views

CVE-2015-10005

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

7.5CVSS5.3AI score0.00946EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/12/27 8:10 a.m.•40 views

CVE-2018-25049 email-existence index.js redos

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is...

3CVSS7.5AI score0.00721EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/12/27 8:10 a.m.•9 views

CVE-2018-25049 email-existence index.js redos

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is...

3CVSS7.5AI score0.00721EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/12/27 8:05 a.m.•32 views

CVE-2015-10005 markdown-it html_re.js redos

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

3.5CVSS7.6AI score0.00946EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/12/27 8:05 a.m.•8 views

CVE-2015-10005 markdown-it html_re.js redos

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

3.5CVSS6.9AI score0.00946EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/27 12:00 a.m.•1 views

CVE-2015-10005: Inefficient Regular Expression Complexity

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

7.5CVSS5AI score0.00946EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/27 12:00 a.m.•16 views

Markdown-It 安全漏洞

Markdown-It is a Markdown parser. A security vulnerability exists in versions of Markdown-It before 2.x. An attacker exploited the vulnerability to cause an increase in the complexity of regular expressions...

7.5CVSS5.6AI score0.00946EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2022/12/23 12:00 a.m.•44 views

Fedora 36 : python3.6 (2022-d4570fc1a6)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-d4570fc1a6 advisory. Prevent denial of service DoS by very large integers. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

7.5CVSS7AI score0.07178EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/12/22 12:00 a.m.•36 views

Fedora 36 : ghc-cmark-gfm (2022-6bcee2cc93)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6bcee2cc93 advisory. updates the C library to 0.29.0.gfm.6 which fixes CVE-2022-39209 Tenable has extracted the preceding description block directly from the Fedora...

7.5CVSS6.8AI score0.02151EPSS
SaveExploits0References2
Rows per page
Query Builder