Lucene search
+L

10089 matches found

NVD
NVD
added 2022/10/11 7:15 p.m.29 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS0.02217EPSS
SaveExploits0References7
OSV
OSV
added 2022/10/11 7:15 p.m.11 views

UBUNTU-CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS6.7AI score0.02217EPSS
SaveExploits0References5
Prion
Prion
added 2022/10/11 7:15 p.m.33 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

5CVSS7.8AI score0.02217EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2022/10/11 7:15 p.m.52 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS6.8AI score0.02217EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/10/11 7:30 a.m.17 views

Ruby: Double free in Regexp compilation

A double-free vulnerability was found in Ruby. The issue occurs during Regexp compilation. This flaw allows an attacker to create a Regexp object with a crafted source string that could cause the same memory to be freed twice...

9.8CVSS7.2AI score0.02893EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2022/10/11 12:00 a.m.49 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS7.4AI score0.02217EPSS
SaveExploits0
CNVD
CNVD
added 2022/10/11 12:00 a.m.64 views

Unspecified Vulnerability in Wyse ThinOS

Wyse ThinOS is a specialized operating system for Dell servers from Dell USA. A security vulnerability exists in Wyse ThinOS that stems from the inclusion of a regular expression denial of service vulnerability in the UI, which can be exploited by an administrator privileged attacker to cause a...

6.8CVSS5.2AI score0.00634EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/10/11 12:00 a.m.36 views

RHEL 7 : rh-ruby27-ruby (RHSA-2022:6856)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6856 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

9.8CVSS7.6AI score0.04766EPSS
SaveExploits3References12
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.7 views

loader-utils 安全漏洞

loader-utils is a webpack open source utility for the webpack loader. A security vulnerability exists in webpack loader-utils version 2.0.0, which stems from the discovery of a regular expression denial of service ReDoS vulnerability contained in the interpolateName function of interpolateName...

7.5CVSS6.9AI score0.02217EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2022/10/11 12:00 a.m.51 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.6AI score0.02217EPSS
SaveExploits0References6
CVE
CVE
added 2022/10/11 12:00 a.m.245 views

CVE-2022-37599

CVE-2022-37599: A ReDoS in Function interpolateName (interpolateName.js) in webpack loader-utils 2.0.0 is triggered via the resourcePath variable in interpolateName.js. The Nessus/Confluence entry explicitly ties this CVE to affected Confluence deployments using webpack loader-utils, describing a...

7.5CVSS7.2AI score0.02217EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/10/11 12:00 a.m.33 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

8.3AI score
SaveExploits0References9
CVE
CVE
added 2022/10/10 8:55 p.m.60 views

CVE-2022-34402

Dell Wyse ThinOS 2205 UI is affected by a Regular Expression Denial of Service vulnerability. The root cause is an inefficient regex in the UI, which could be exploited by an admin-privileged attacker to cause a denial of service. The issue is documented across multiple sources (including NVD and...

6.8CVSS5AI score0.00634EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/10 8:55 p.m.36 views

CVE-2022-34402

Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service...

6.8CVSS6.7AI score0.00634EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2022/10/09 5:15 p.m.11 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134-LAB Confluence Server and Confluence Data Cent...

9.8CVSS9.8AI score0.99999EPSS
SaveExploits77
OSV
OSV
added 2022/10/07 7:33 a.m.45 views

GHSA-XRX9-GJ26-5WX9 v8n vulnerable to Inefficient Regular Expression Complexity

Impact Inefficient regular expression complexity of lowercase and uppercase regex could lead to a denial of service attack. With a formed payload 'a' + 'a'.repeati + 'A', only 32 characters payload could take 29443 ms time execution when testing lowercase. The same issue happens with uppercase...

7.5CVSS7.4AI score0.01631EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/10/07 7:33 a.m.35 views

v8n vulnerable to Inefficient Regular Expression Complexity

Impact Inefficient regular expression complexity of lowercase and uppercase regex could lead to a denial of service attack. With a formed payload 'a' + 'a'.repeati + 'A', only 32 characters payload could take 29443 ms time execution when testing lowercase. The same issue happens with uppercase...

7.5CVSS7.2AI score0.01631EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2022/10/06 6:16 p.m.35 views

CVE-2022-39280

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

7.5CVSS0.01087EPSS
SaveExploits0References4
OSV
OSV
added 2022/10/06 6:16 p.m.31 views

PYSEC-2022-301

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

7.5CVSS6.9AI score0.01087EPSS
SaveExploits0References4
Prion
Prion
added 2022/10/06 6:16 p.m.16 views

Design/Logic Flaw

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

5CVSS7.4AI score0.01087EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder