4495 matches found
Denial Of Service (DoS)
OpenJDK is vulnerable to Regular Expression Denial of Service ReDoS. It is due to unexpected exception thrown during regular expression processing in Nashorn...
Regular Expression Denial Of Service (ReDoS)
mimer is vulnerable to regular expression denial of service ReDoS. The function extGetter uses an incorrect regular expression to split file path input from the user, causing an application crash via intensive CPU and memory consumption when parsing malicious file path...
PT-2019-5583
Name of the Vulnerable Software and Affected Versions Python versions 2.7.16 and earlier, 3.x through 3.6.9, and 3.7.x through 3.7.4 Description The issue is related to the documentation XML-RPC server in Python, which is vulnerable to cross-site scripting XSS attacks via the server title field...
larvitlog (>=0.1.0, <=0.3.4), larvituser-api (>=0.2.0, <=0.4.0) potentially affected by CVE-2019-5479 via larvitbase-api (>=0.2.2, <=0.5.1)
larvitbase-api NPM version =0.2.2, =0.1.0, =0.2.0, =0.4.0 Source cves: CVE-2019-5479 Source advisory: OSV:GHSA-XF27-JQWV-GF3R...
Metasploit HTTP(S) handler DoS
This module exploits the Metasploit HTTPS handler by sending a specially crafted HTTP request that gets added as a resource handler. Resources which come from the external connections are evaluated as RegEx in the handler server. Specially crafted input can trigger Gentle, Soft and Hard DoS. Test...
Denial of Service in rgb2hex
All versions of rgb2hex are vulnerable to Regular Expression Denial of Service ReDoS when an attacker can pass in a specially crafted invalid color value. Recommendation Update to version 0.1.6 or later...
Regular Expression Denial Of Service (ReDoS)
Django is vulnerable to regular expression denial of service ReDoS. The attack is due to lack of validation of inputs to a regular expression in django.utils.text.Truncator's chars and words methods, eventually causing an application crash if the input html=True is provided...
Regular Expression Denial Of Service (ReDoS)
gettext-parser is vulnerable to Regular Expression Denial Of Service. The library contains a regular expression that is vulnerable to catastrophic backtracking. When presented with a malicious long string, the regex will run for an exponentially long time, potentially causing the application to...
Regular Expression Denial Of Service (ReDoS)
marked is vulnerable to regular expression denial of service DoS. The attack is possible because it does not use efficient link tags in regular expression, thereby leading to a high CPU usage if an attacker parses an input link with nested parenthesis containing a large number of link tokens to t...
wicked-saml (>=0.10.0, <=0.11.3) potentially affected by CVE-2017-11429 via saml2-js (1.10.0)
saml2-js NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on saml2-js and may be impacted: - wicked-saml =0.10.0, =0.11.3 Source cves: CVE-2017-11429 Source advisory: OSV:GHSA-5P5W-J3G7-W4WV...
CVE-2018-14733
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
CVE-2018-14733
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
Design/Logic Flaw
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
CVE-2018-14733
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
CVE-2018-14733
The CVE-2018-14733 issue affects Odoo, specifically the OCA dbfilter_from_header module, impacting Odoo 8.x–11.x. The root cause is a regular expression denial of service (ReDoS) under certain circumstances, exposed via the dbfilter_from_header plugin. Public references in Red Hat, Debian, and CN...
CVE-2018-14733
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
CVE-2018-14733: Improper Input Validation
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
GHSA-H6CH-V84P-W6P9 Regular Expression Denial of Service (ReDoS)
A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS attacks...
Regular Expression Denial of Service (ReDoS)
A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS attacks...