Lucene search
+L

10070 matches found

RedHat Linux
RedHat Linux
added 2023/03/30 1:06 p.m.16 views

nodejs-minimatch: ReDoS via the braceExpand function

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.1AI score0.01816EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/03/30 1:06 p.m.8 views

http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

A flaw was found in http-cache-semantics. When the server reads the cache policy from the request using this library, a Regular Expression Denial of Service occurs, caused by malicious request header values sent to the server...

7.5CVSS7.1AI score0.01613EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2023/03/30 1:01 p.m.30 views

CVE-2023-26116

A flaw was found in AngularJS, where it is vulnerable to a denial of service caused by a regular expression denial of service ReDoS flaw in the angular.copy utility function. By providing specially-crafted regex input, a remote attacker can cause a denial of service...

5.3CVSS7AI score0.01695EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2023/03/30 1:01 p.m.39 views

CVE-2023-26118

A flaw was found in AngularJS, where it is vulnerable to a denial of service caused by a regular expression denial of service ReDoS flaw in the inputurl functionality. By providing specially-crafted regex input, a remote attacker can cause a denial of service...

5.3CVSS7AI score0.01695EPSS
SaveExploits1References4
OSV
OSV
added 2023/03/30 6:30 a.m.16 views

GHSA-2QQX-W9HR-Q5GX angular vulnerable to regular expression denial of service via the $resource service

All versions of the package angular are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtrackin...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References10
Github Security Blog
Github Security Blog
added 2023/03/30 6:30 a.m.102 views

angular vulnerable to regular expression denial of service via the angular.copy() utility

All versions of the package angular are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS7.2AI score0.01695EPSS
SaveExploits1References10Affected Software1
Github Security Blog
Github Security Blog
added 2023/03/30 6:30 a.m.77 views

angular vulnerable to regular expression denial of service via the $resource service

All versions of the package angular are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtrackin...

5.3CVSS7.2AI score0.01695EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2023/03/30 6:30 a.m.19 views

GHSA-2VRF-HF26-JRP5 angular vulnerable to regular expression denial of service via the angular.copy() utility

All versions of the package angular are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References10
OSV
OSV
added 2023/03/30 6:30 a.m.30 views

GHSA-QWQH-HM9M-P5HR angular vulnerable to regular expression denial of service via the <input type="url"> element

All versions of the package angular are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References10
Github Security Blog
Github Security Blog
added 2023/03/30 6:30 a.m.89 views

angular vulnerable to regular expression denial of service via the <input type="url"> element

All versions of the package angular are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5.3CVSS5.3AI score0.01695EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2023/03/30 5:15 a.m.5 views

DEBIAN-CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS6.3AI score0.01695EPSS
SaveExploits1References1
NVD
NVD
added 2023/03/30 5:15 a.m.30 views

CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5.3CVSS5.4AI score0.01695EPSS
SaveExploits1References8
NVD
NVD
added 2023/03/30 5:15 a.m.26 views

CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS5.4AI score0.01695EPSS
SaveExploits1References8
NVD
NVD
added 2023/03/30 5:15 a.m.30 views

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5.3CVSS5.4AI score0.01695EPSS
SaveExploits1References8
Prion
Prion
added 2023/03/30 5:15 a.m.67 views

Design/Logic Flaw

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5CVSS5.2AI score0.01695EPSS
SaveExploits1References7Affected Software2
OSV
OSV
added 2023/03/30 5:15 a.m.16 views

UBUNTU-CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS6.7AI score0.01695EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2023/03/30 5:15 a.m.48 views

CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2023/03/30 5:15 a.m.38 views

CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References4
Prion
Prion
added 2023/03/30 5:15 a.m.54 views

Design/Logic Flaw

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5CVSS5.3AI score0.01695EPSS
SaveExploits1References7Affected Software2
OSV
OSV
added 2023/03/30 5:15 a.m.15 views

UBUNTU-CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References5
Rows per page
Query Builder