Lucene search
+L

3176 matches found

CNVD
CNVD
•added 2022/06/09 12:00 a.m.•95 views

npm jquery-validation denial-of-service vulnerability

npm jquery-validation is a form insertion validation application provided by npm, Inc. npm jquery-validation version 1.19.3 contains a denial of service vulnerability, which stems from the fact that an attacker who is able to provide arbitrary input to the url2 method can trigger a denial of...

5CVSS5.5AI score0.01523EPSS
SaveExploits1Affected Software1
Veracode
Veracode
•added 2022/06/03 11:40 a.m.•278 views

Regular Expression Denial Of Service (ReDoS)

jquery-validation is vulnerable to regular expression denial of service. The vulnerability exists in addMethod in url2.js due to insufficient regular expression complexity which allows an attacker to cause a ReDoS...

7.5CVSS4.8AI score0.01523EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2022/06/03 12:00 a.m.•26 views

GHSA-J9M2-H2PV-WVPH Regular expression denial of service in jquery-validation

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.3AI score0.01523EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2022/06/03 12:00 a.m.•144 views

Regular expression denial of service in jquery-validation

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS4.5AI score0.01523EPSS
SaveExploits1References5Affected Software1
vulnersOsv
vulnersOsv
•added 2022/06/03 12:00 a.m.•4 views

@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2021-43306 via jquery-validation (>=1.14.0, <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2021-43306 Source advisory: GHSA-J9M2-H2PV-WVPH...

7.5CVSS0.01523EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/06/03 12:00 a.m.•16 views

@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2021-43306 via jquery-validation (>=1.14.0, <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2021-43306 Source advisory: OSV:GHSA-J9M2-H2PV-WVPH...

7.5CVSS7.6AI score0.01523EPSS
SaveExploits1
osv_cve
osv_cve
•added 2022/06/02 2:15 p.m.•24 views

CVE-2021-43306

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.5AI score0.01523EPSS
SaveExploits1References1
NVD
NVD
•added 2022/06/02 2:15 p.m.•40 views

CVE-2021-43306

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS0.01523EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/06/02 2:15 p.m.•27 views

UBUNTU-CVE-2021-43306

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.2AI score0.01523EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/06/02 2:15 p.m.•46 views

CVE-2021-43306

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.2AI score0.01523EPSS
SaveExploits1References3
Prion
Prion
•added 2022/06/02 2:15 p.m.•30 views

Input validation

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

5CVSS7.4AI score0.01523EPSS
SaveExploits1References1Affected Software1
osv_oesa
osv_oesa
•added 2022/06/02 11:04 a.m.•18 views

OESA-2022-1693 python-XStatic-jquery-ui security update

jquery-ui javascript library packaged for setuptools easyinstall / pip. This package is intended to be used by any project that needs these files. It intentionally does not provide any extra code except some metadata nor has any extra requirements. You MAY use some minimal support code from the...

6.1CVSS9AI score0.08533EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•67 views

npm jquery-validation security vulnerability

npm jquery-validation is a form insertion validation application provided by npm, Inc. npm jquery-validation version 1.19.3 contains a denial of service vulnerability, which stems from the fact that an attacker who is able to provide arbitrary input to the url2 method can trigger a denial of...

7.5CVSS5.8AI score0.01523EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2022/06/01 4:47 p.m.•81 views

CVE-2021-43306

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.6AI score0.01523EPSS
SaveExploits1
CVE
CVE
•added 2022/06/01 4:47 p.m.•228 views

CVE-2021-43306

The CVE-2021-43306 entry concerns the jQuery Validation Plugin (jquery-validation). The vulnerability is a Regular Expression Denial of Service (ReDoS) triggered when an attacker can supply arbitrary input to the url2 method, due to an incomplete fix for CVE-2021-43306. Affected versions are thos...

7.5CVSS6.4AI score0.01523EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/06/01 4:47 p.m.•13 views

CVE-2021-43306

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

8.2CVSS0.01523EPSS
SaveExploits1References6
vulnersOsv
vulnersOsv
•added 2022/06/01 4:47 p.m.•3 views

@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2021-43306 via jquery-validation (>=1.14.0, <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2021-43306 Source advisory: MEND:CVE-2021-43306...

7.5CVSS0.01523EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/06/01 4:47 p.m.•86 views

CVE-2021-43306 Exponential ReDoS in jquery-validation

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

5.9CVSS7.8AI score0.01523EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/06/01 12:00 a.m.•21 views

PT-2022-11818 · Npm · Jquery-Validation

Name of the Vulnerable Software and Affected Versions: jquery-validation npm package affected versions not specified Description: An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package when an attacker is able to supply arbitrary input to t...

7.5CVSS7.4AI score0.01523EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/01 12:00 a.m.•11 views

CVE-2021-43306: Inefficient Regular Expression Complexity

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.4AI score0.01523EPSS
SaveExploits1References3
Rows per page
Query Builder