Lucene search
+L

441 matches found

CNNVD
CNNVD
•added 2021/03/29 12:00 a.m.•26 views

Npm is-my-json-valid 资源管理错误漏洞

Npm is-my-json-valid is an application of the United States Npm . A JSONSchema is very fast to validate using a code generation mechanism. A resource management error vulnerability exists in is-my-json-valid, which stems from the use of an inefficient regular expression to validate a JSON field...

5.3CVSS6.5AI score0.01204EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2021/03/25 5:15 p.m.•10 views

CVE-2021-25351

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password...

3.2CVSS4.8AI score0.00288EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/03/24 12:00 a.m.•22 views

Cisco Jabber for Windows 安全漏洞

Cisco Jabber is a web conferencing and instant messaging application that allows users to send messages over the Extensible Messaging and Status Protocol XMPP. Cisco Jabber suffers from a code execution vulnerability that stems from an email content validation error. An attacker could exploit thi...

9.9CVSS8.6AI score0.01382EPSS
SaveExploits0References3
Veracode
Veracode
•added 2021/03/22 1:37 a.m.•27 views

Regular Expression Denial Of Service (ReDoS)

schema-inspector is vulnerable to regular expression denial of service ReDoS. The vulnerability exists through the email validation method where an input such as example@0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0. would result in large consumption of...

7.5CVSS3AI score0.0209EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2021/03/19 9:15 p.m.•43 views

CVE-2021-21267

Schema-Inspector is an open-source tool to sanitize and validate JS objects npm package schema-inspector. In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input for example...

7.5CVSS0.0209EPSS
SaveExploits1References4
OSV
OSV
•added 2021/03/19 9:15 p.m.•33 views

CVE-2021-21267

Schema-Inspector is an open-source tool to sanitize and validate JS objects npm package schema-inspector. In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input for example...

7.5CVSS6.8AI score
SaveExploits0References4
Prion
Prion
•added 2021/03/19 9:15 p.m.•39 views

Input validation

Schema-Inspector is an open-source tool to sanitize and validate JS objects npm package schema-inspector. In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input for example...

5CVSS7.5AI score0.0209EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2021/03/19 9:15 p.m.•12 views

CVE-2021-21267

Schema-Inspector is an open-source tool to sanitize and validate JS objects npm package schema-inspector. In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input for example...

7.5CVSS7AI score0.0209EPSS
SaveExploits1References5Affected Software1
nodejs
nodejs
•added 2021/03/19 8:19 p.m.•96 views

Regular Expression Denial of Service

Overview There is a regular expression denial-of-service in schema-inspector. Impact Email address validation is vulnerable to a denial-of-service attack where some input for example a@0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0. will freeze the program...

5CVSS7.4AI score0.0209EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2021/03/19 8:14 p.m.•81 views

GHSA-F38P-C2GQ-4PMR Regular Expression Denial-of-Service in npm schema-inspector

Impact What kind of vulnerability is it? Who is impacted? Email address validation is vulnerable to a denial-of-service attack where some input for example a@0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0. will freeze the program or web browser page...

7.5CVSS7.4AI score0.0209EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2021/03/19 8:14 p.m.•74 views

Regular Expression Denial-of-Service in npm schema-inspector

Impact What kind of vulnerability is it? Who is impacted? Email address validation is vulnerable to a denial-of-service attack where some input for example a@0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0. will freeze the program or web browser page...

7.5CVSS7.4AI score0.0209EPSS
SaveExploits1References7Affected Software1
CNNVD
CNNVD
•added 2021/03/19 12:00 a.m.•12 views

Npm Schema-Inspector 资源管理错误漏洞

Npm Schema-Inspector is an application from the United States Npm. An open source tool for cleaning and validating JS objects. A resource management error vulnerability exists in npm schema-inspector before version 2.0.0, which stems from the fact that email address validation is vulnerable to...

7.5CVSS7.3AI score0.0209EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/19 12:00 a.m.•7 views

CVE-2021-21267: Uncontrolled Resource Consumption

Schema-Inspector is an open-source tool to sanitize and validate JS objects npm package schema-inspector. In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input for example...

7.5CVSS5.8AI score0.0209EPSS
SaveExploits1References3
FreeBSD
FreeBSD
•added 2021/03/11 12:00 a.m.•19 views

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.14.0: Validate email in external authenticator registration form Ensure validation occurs on clone addresses too...

3.1AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2021/02/16 2:28 p.m.•20 views

nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters...

7.5CVSS7.4AI score0.03481EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2021/02/16 2:25 p.m.•10 views

nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters...

7.5CVSS7.4AI score0.03481EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2021/02/15 6:28 p.m.•13 views

nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters...

7.5CVSS7.4AI score0.03481EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2021/02/11 1:37 p.m.•20 views

nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters...

7.5CVSS7.4AI score0.03481EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2021/02/04 5:20 p.m.•13 views

nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters...

7.5CVSS7.4AI score0.03481EPSS
SaveExploits1References5
Kitploit
Kitploit
•added 2021/01/07 8:30 p.m.•49 views

UhOh365 - A Script That Can See If An Email Address Is Valid In Office365 (User/Email Enumeration)

A script that can see if an email address is valid in Office365. This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't. Microsoft does not consider "email enumeration" a vulnerability, so th...

7.7AI score
SaveExploits0References3
Rows per page
Query Builder