Lucene search
+L

645 matches found

OSV
OSV
•added 2021/03/23 5:15 p.m.•15 views

ALPINE-CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.7AI score0.02759EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/23 5:15 p.m.•13 views

AZL-6811 CVE-2021-20270 affecting package python-pygments for versions less than 2.4.2-7

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02759EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/23 5:15 p.m.•17 views

AZL-35137 CVE-2021-20270 affecting package python-pygments for versions less than 2.7.4-1

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02759EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/23 5:15 p.m.•43 views

Input validation

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

5CVSS7.1AI score0.02759EPSS
SaveExploits0References5Affected Software6
PyPA
PyPA
•added 2021/03/23 5:15 p.m.•17 views

PYSEC-2021-140

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.7AI score0.02759EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2021/03/23 5:15 p.m.•20 views

PYSEC-2021-140

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02759EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2021/03/23 5:15 p.m.•10 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.8AI score0.02759EPSS
SaveExploits0References6
CVE
CVE
•added 2021/03/23 4:40 p.m.•386 views

CVE-2021-20270

CVE-2021-20270 describes an infinite loop in Pygments’ SMLLexer, affecting Pygments 1.5–2.7.3, which can cause DoS during syntax highlighting of StandardML sources (e.g., input containing only the keyword “exception”). Connected advisories confirm affected distributions (e.g., Debian, AlmaLinux, ...

7.5CVSS7.3AI score0.02759EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2021/03/23 4:40 p.m.•64 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.6AI score0.02759EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2021/03/23 4:40 p.m.•56 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS8.1AI score0.02759EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2021/03/23 4:40 p.m.•64 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS7.6AI score0.02759EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/23 12:00 a.m.•3 views

CVE-2021-20270: Loop with Unreachable Exit Condition

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS5.7AI score0.02759EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2021/03/09 4:10 p.m.•10 views

python-pygments: Infinite loop in SML lexer may lead to DoS

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS7.4AI score0.02759EPSS
SaveExploits0References4
OSV
OSV
•added 2021/03/09 12:00 a.m.•8 views

UBUNTU-CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02759EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/03/05 10:35 a.m.•54 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS3.3AI score0.02759EPSS
SaveExploits0References3
Huntr
Huntr
•added 2021/01/28 12:00 a.m.•21 views

Code Injection in tensorflow/tfx

Description TensorFlow Extended TFX is a Google-production-scale machine learning platform based on TensorFlow. It provides a configuration framework to express ML pipelines consisting of TFX components. Vulnerability Vulnerable to YAML deserialization attack caused by unsafe loading. Proof of...

2.5AI score
SaveExploits0References1
OSV
OSV
•added 2020/12/16 5:15 p.m.•14 views

CVE-2020-7837

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...

8.8CVSS6.1AI score0.00749EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/16 5:15 p.m.•32 views

CVE-2020-7837

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...

8.8CVSS8AI score0.00749EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/16 5:15 p.m.•23 views

Stack overflow

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...

6.8CVSS8.7AI score0.00749EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/12/16 4:09 p.m.•58 views

CVE-2020-7837

The CVE-2020-7837 entry describes a stack-based buffer overflow in Infraware’s ML Report Program (MLReportDeamon.exe). The root cause is an unchecked vsprintf call within function sub_41EAF0, allowing attacker-supplied strings to overflow a stack buffer via crafted web page access. Affected produ...

8.8CVSS8.7AI score0.00749EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder