Lucene search
+L

413 matches found

Github Security Blog
Github Security Blog
added 2018/03/05 7:16 p.m.34 views

AWS Lambda parser is vulnerable to Regular Expression Denial of Service

index.js in the aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

7.5CVSS4.9AI score0.01356EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/03/05 7:16 p.m.66 views

GHSA-6JQP-J69Q-PM62 AWS Lambda parser is vulnerable to Regular Expression Denial of Service

index.js in the aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

7.5CVSS7.3AI score0.01356EPSS
SaveExploits0References4
NVD
NVD
added 2018/03/04 8:29 p.m.31 views

CVE-2018-7560

index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

7.5CVSS7.4AI score0.01356EPSS
SaveExploits0References1
OSV
OSV
added 2018/03/04 8:29 p.m.17 views

CVE-2018-7560

index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

7.5CVSS7AI score
SaveExploits0References1
Cvelist
Cvelist
added 2018/03/04 8:00 p.m.48 views

CVE-2018-7560

index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

7.4AI score0.01356EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/30 12:00 a.m.11 views

brace-expansionindex.js file denial of service vulnerability

brace-expansion is a tool that generates arbitrary strings. A denial of service vulnerability exists in the index.js file in versions of brace-expansion prior to 1.1.7. An attacker can exploit this vulnerability to cause a denial of service...

7.5CVSS6.8AI score0.0258EPSS
SaveExploits1References1
Prion
Prion
added 2018/01/27 12:29 p.m.21 views

Code injection

index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...

5CVSS7.4AI score0.0258EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2018/01/27 12:29 p.m.28 views

CVE-2017-18077

index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...

7.5CVSS7.5AI score0.0258EPSS
SaveExploits1References4
OSV
OSV
added 2018/01/27 12:29 p.m.31 views

CVE-2017-18077

index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...

7.5CVSS7.7AI score
SaveExploits0References4
CVE
CVE
added 2018/01/27 12:00 p.m.105 views

CVE-2017-18077

CVE-2017-18077 : The brace-expansion package’s index.js is vulnerable to a Regular Expression Denial of Service (ReDoS) when given an expand argument with many comma characters. Affected: brace-expansion prior to 1.1.7. Impact and exploit details are documented in the connected sources. Remediati...

7.5CVSS7.2AI score0.0258EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2017/05/09 8:46 a.m.12 views

Information Disclosure

nforce is vulnerable to information disclosure. The vulnerability exists because index.js leaks the clientsecret from the URI generated by getAuthUri...

6.2AI score
SaveExploits0
securityvulns
securityvulns
added 2015/10/26 12:00 a.m.4654 views

NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability

Document Title: =============== NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1600 Release Date: ============= 2015-09-24 Vulnerability Laboratory ID VL-ID: ====================================...

0.4AI score
SaveExploits0
Debian CVE
Debian CVE
added 2014/12/11 11:00 a.m.56 views

CVE-2014-7192

Removed by vendor...

10CVSS6.7AI score0.13048EPSS
SaveExploits2
Rows per page
Query Builder