Lucene search
+L

697 matches found

Cvelist
Cvelist
•added 2019/04/23 1:54 p.m.•53 views

CVE-2018-20822

LibSass 3.5.4 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::ComplexSelector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp...

6.4AI score0.02107EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2019/04/23 1:54 p.m.•72 views

CVE-2018-20822

LibSass 3.5.4 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::ComplexSelector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp...

6.5CVSS7.8AI score0.02107EPSS
SaveExploits1
Cvelist
Cvelist
•added 2019/04/23 1:54 p.m.•45 views

CVE-2018-20821

The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::Parser::parsecssvariablevalue in parser.cpp...

7.6AI score0.02218EPSS
SaveExploits1References4
CVE
CVE
•added 2019/04/23 1:54 p.m.•186 views

CVE-2018-20821

CVE-2018-20821 : LibSass up to version 3.5.5 is vulnerable to a denial of service due to uncontrolled recursion in Sass::Parser::parse_css_variable_value (parser.cpp). The root cause is in the parsing component; attackers could trigger DoS by crafting input. The connected documents confirm the af...

6.5CVSS6.3AI score0.02218EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2019/04/23 1:54 p.m.•3 views

CVE-2018-20821

The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::Parser::parsecssvariablevalue in parser.cpp...

7.1CVSS0.02218EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2019/04/23 1:54 p.m.•48 views

CVE-2018-20821

The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::Parser::parsecssvariablevalue in parser.cpp...

6.5CVSS7.8AI score0.02218EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2019/04/23 12:00 a.m.•10 views

PT-2019-10261 · Sass +2 · Libsass +2

Name of the Vulnerable Software and Affected Versions: LibSass version 3.5.4 Description: The issue allows attackers to cause a denial-of-service due to uncontrolled recursion. This occurs in the Sass::Complex Selector::perform function in ast.hpp and the Sass::Inspect::operator in inspect.cpp...

9.8CVSS6.3AI score0.03838EPSS
SaveExploits17References90
Positive Technologies
Positive Technologies
•added 2019/04/23 12:00 a.m.•17 views

PT-2019-10260 · Sass +2 · Libsass +2

Name of the Vulnerable Software and Affected Versions: LibSass versions 3.5.5 and earlier Description: The parsing component in LibSass allows attackers to cause a denial-of-service due to uncontrolled recursion in Sass::Parser::parse css variable value in parser.cpp. Recommendations: For LibSass...

9.8CVSS6.2AI score0.03838EPSS
SaveExploits17References90
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/23 12:00 a.m.•5 views

CVE-2018-20821: Uncontrolled Recursion

The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::Parser::parsecssvariablevalue in parser.cpp...

6.5CVSS8.1AI score0.02218EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/23 12:00 a.m.•8 views

CVE-2018-20822: Uncontrolled Recursion

LibSass 3.5.4 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::ComplexSelector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp...

6.5CVSS8.1AI score0.02107EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
•added 2019/04/01 5:05 p.m.•47 views

Security Bulletin: IBM API Connect is impacted by multiple open source software vulnerabilities.

Summary IBM API Connect has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-0268 DESCRIPTION: Microsoft Server Message Block 1.0 SMBv1 could allow a remote attacker to obtain sensitive information, caused by improper handling of incoming requests. By sending...

9.8CVSS0.8AI score0.07243EPSS
SaveExploits7Affected Software1
CNVD
CNVD
•added 2019/01/15 12:00 a.m.•10 views

LibSass heap buffer overread vulnerability (CNVD-2019-40134)

LibSass is the C/C ++ implementation of the Sass compiler. A heap-based buffer over-read vulnerability exists in Sass::Prelexer::parenthesescope in prelexer.hpp in LibSass 3.5.5. An attacker can exploit this vulnerability to cause a denial of service...

6.5CVSS9.2AI score0.0191EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/01/15 12:00 a.m.•17 views

LibSass Heap Buffer Over-Read Vulnerability

LibSass is the C/C ++ implementation of the Sass compiler. A heap-based buffer over-read vulnerability exists in Sass::Prelexer::alternatives in prelexer.hpp in LibSass 3.5.5. An attacker can exploit this vulnerability to cause a denial of service...

6.5CVSS9.2AI score0.02096EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/01/15 12:00 a.m.•11 views

LibSass Buffer Overflow Vulnerability (CNVD-2019-01855)

LibSass is an open source written in C using Sass CSS extension language parser . A buffer overflow vulnerability exists in the Sass::Prelexer::skipoverscopes of the prelexer.hpp file in LibSass version 3.5.5. No details of the vulnerability are provided at this time...

6.5CVSS9.8AI score0.02115EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2019/01/14 10:29 p.m.•12 views

UBUNTU-CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...

6.5CVSS7.5AI score0.02096EPSS
SaveExploits1References4
Prion
Prion
•added 2019/01/14 10:29 p.m.•19 views

Heap overflow

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...

4.3CVSS7.8AI score0.0191EPSS
SaveExploits1References4Affected Software1
osv_debian
osv_debian
•added 2019/01/14 10:29 p.m.•9 views

DEBIAN-CVE-2019-6283

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...

6.5CVSS8.7AI score0.0191EPSS
SaveExploits1References1
NVD
NVD
•added 2019/01/14 10:29 p.m.•16 views

CVE-2019-6283

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...

6.5CVSS6.6AI score0.0191EPSS
SaveExploits1References4
NVD
NVD
•added 2019/01/14 10:29 p.m.•14 views

CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...

6.5CVSS6.7AI score0.02096EPSS
SaveExploits1References4
NVD
NVD
•added 2019/01/14 10:29 p.m.•34 views

CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

6.5CVSS7.1AI score0.02115EPSS
SaveExploits1References4
Rows per page
Query Builder