Lucene search
+L

4496 matches found

OSV
OSV
•added 2025/11/26 1:49 a.m.•24 views

CVE-2025-66020 Valibot has a ReDoS vulnerability in `EMOJI_REGEX`

Valibot helps validate data using a schema. In versions from 0.31.0 to 1.1.0, the EMOJIREGEX used in the emoji action is vulnerable to a Regular Expression Denial of Service ReDoS attack. A short, maliciously crafted string e.g., 100 characters can cause the regex engine to consume excessive CPU...

7.5CVSS6.7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/26 12:00 a.m.•2 views

CVE-2025-66020: Inefficient Regular Expression Complexity

Valibot helps validate data using a schema. In versions from 0.31.0 to 1.1.0, the EMOJIREGEX used in the emoji action is vulnerable to a Regular Expression Denial of Service ReDoS attack. A short, maliciously crafted string e.g., 100 characters can cause the regex engine to consume excessive CPU...

7.5CVSS5.6AI score0.00331EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/11/20 12:00 a.m.•13 views

TencentOS Server 3: python3.12 (TSSA-2024:0799)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0799 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

7.5CVSS6.7AI score0.02203EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2025/11/20 12:00 a.m.•14 views

TencentOS Server 3: ruby:3.1 (TSSA-2024:0106)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0106 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.8CVSS6.8AI score0.02637EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/11/20 12:00 a.m.•16 views

TencentOS Server 3: ruby:2.5 (TSSA-2023:0312)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0312 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.8CVSS7.1AI score0.0437EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/11/20 12:00 a.m.•13 views

TencentOS Server 3: ruby (TSSA-2024:0331)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0331 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

9.8CVSS6.9AI score0.02637EPSS
SaveExploits1References6
Mageia
Mageia
•added 2025/11/13 11:37 p.m.•15 views

Updated python-py packages fix security vulnerability

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. CVE-2022-42969...

7.5CVSS6.8AI score0.01672EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/11/04 12:00 a.m.•15 views

macOS 15.x < 15.7.2 Multiple Vulnerabilities (125635)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.7.2. It is, therefore, affected by multiple vulnerabilities: - A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Tahoe...

9.8CVSS6.8AI score0.0142EPSS
SaveExploits4References62
SUSE Linux
SUSE Linux
•added 2025/11/02 12:18 p.m.•6 views

Security update for rav1e

This update for rav1e fixes the following issues: CVE-2022-24713: Updated crate regex to 1.5.5 that resolves a ReDoS issue bsc1196972 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run t...

4.3CVSS6.6AI score0.1446EPSS
SaveExploits1References4
OSV
OSV
•added 2025/11/02 12:18 p.m.•12 views

SUSE-SU-2025:3911-1 Security update for rav1e

This update for rav1e fixes the following issues: - CVE-2022-24713: Updated crate regex to 1.5.5 that resolves a ReDoS issue bsc1196972...

7.5CVSS6.6AI score0.1446EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/10/31 3:11 p.m.•18 views

CVE-2025-5342

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module...

6.5CVSS6.9AI score0.01137EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/30 3:15 p.m.•15 views

CVE-2025-5342

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module...

6.5CVSS0.01137EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/30 3:15 p.m.•17 views

CVE-2025-5342

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module...

6.5CVSS5.8AI score0.01137EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/30 2:20 p.m.•13 views

CVE-2025-5342 Denial of Service (DoS)

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module...

4.3CVSS5.7AI score0.01137EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/30 2:20 p.m.•17 views

EUVD-2025-37005

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module...

4.3CVSS6.4AI score0.01137EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•3 views

CVE-2025-5342: Uncontrolled Resource Consumption

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module...

6.5CVSS5.8AI score0.01137EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/22 10:57 a.m.•23 views

Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in transformers-4.48.3-py3-none-any.whl

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in transformers-4.48.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-1194 DESCRIPTION: A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers...

6.5CVSS6.2AI score0.00484EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2025/10/21 2:18 p.m.•16 views

CLSA-2025-1761056282 python3-setuptools: Fix of 2 CVEs

CVE-2022-40897: fix Regular Expression Denial of Service ReDoS in packageindex.py - CVE-2024-6345: fix remote code execution in packageindex module...

8.8CVSS7.2AI score0.02503EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/10/16 8:40 a.m.•6 views

CVE-2025-61581 Apache Traffic Control: ReDoS issue in Traffic Router configuration

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

7.9AI score0.00736EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/16 8:40 a.m.•51 views

CVE-2025-61581

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

7.5CVSS7.9AI score0.00736EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder