2960 matches found
Shescape 输入验证错误漏洞
Shescape is open source a simple shell escaping program package for JavaScript . Use it to escape user-controlled input to shell commands to prevent shell injection. An input validation error vulnerability exists in versions prior to Shescape v1.5.10 that stems from two regular expressions in...
Amazon Linux 2022 : pcre2, pcre2-devel, pcre2-static (ALAS2022-2022-071)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-071 advisory. An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the pcre2jitcompile.c file. This involves a unicode property matching issue ...
CVE-2022-25887
The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure global regular expression replacement logic of HTML comment removal...
Updated python-ldap packages fix security vulnerability
It was discovered that Python LDAP incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause a denial of service CVE-2021-46823...
MGASA-2022-0310 Updated python-ldap packages fix security vulnerability
It was discovered that Python LDAP incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause a denial of service CVE-2021-46823...
nitrado.js 安全漏洞
nitrado.js is a type-safe wrapper for the Nitrado API by Cain Personal Developers. A security vulnerability exists in versions of nitrado.js prior to 0.2.5, which stems from the presence of polynomial regular expressions with uncontrolled data...
CVE-2021-3644
A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly...
CVE-2021-3644
A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly...
Design/Logic Flaw
A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly...
CVE-2021-3644
A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly...
Ubuntu: Security Advisory (USN-3625-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4088-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3902-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
golang: regexp: stack exhaustion via a deeply nested expression
A stack overflow flaw was found in Golang's regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large...
golang: regexp: stack exhaustion via a deeply nested expression
A stack overflow flaw was found in Golang's regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large...
AlmaLinux 8 : pcre2 (5809) (ALSA-2022:5809)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:5809 advisory. - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the pcre2jitcompile.c file. This involves a...
Oracle Linux 8 : pcre2 (ELSA-2022-5809)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5809 advisory. 10.32-3 - Resolves: CVE-2022-1586 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...
PT-2022-23029 · V8N · V8N
Name of the Vulnerable Software and Affected Versions: v8n versions prior to 1.5.1 Description: The issue is related to an inefficient regular expression complexity in the lowercase and uppercase regex of the v8n javascript validation library. This could lead to a denial of service attack. Testin...
golang: regexp: stack exhaustion via a deeply nested expression
A stack overflow flaw was found in Golang's regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large...
[SECURITY] Fedora 36 Update: nex-20210330-4.fc36
Nex is a lexer similar to Lex/Flex that: 1 generates Go code instead of C code, 2 integrates with Go's Yacc instead of YACC/Bison, 3 supports UTF-8, and 4 supports nested structural regular expressions...