Lucene search
+L

4475 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/16 12:00 a.m.•1 views

CVE-2022-42969: Inefficient Regular Expression Complexity

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS6AI score0.01672EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/10/16 12:00 a.m.•8 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

5.3CVSS7.5AI score0.01672EPSS
SaveExploits1References4
CVE
CVE
•added 2022/10/16 12:00 a.m.•378 views

CVE-2022-42969

CVE-2022-42969 affects the Python package py (through 1.11.0). The vulnerability allows a remote ReDoS via a crafted InfoSvnCommand argument in a Subversion repository, caused by mishandling of the info data, per connected IBM security bulletin. The description notes that this issue has been disp...

7.5CVSS7.3AI score0.01672EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2022/10/16 12:00 a.m.•50 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

5.3CVSS7.7AI score0.01672EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2022/10/16 12:00 a.m.•44 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS6.1AI score0.01672EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2022/10/14 7:28 p.m.•69 views

CVE-2022-3517

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS4.3AI score0.01825EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2022/10/14 7:00 p.m.•5 views

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14937 more potentially affected by CVE-2022-37603 via loader-utils (>=1.0.0, <=1.4.1)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37603 Source advisory: OSV:GHSA-3RFM-JHWJ-7488...

7.5CVSS6.5AI score0.02198EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/10/14 7:00 p.m.•78 views

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take ...

7.5CVSS8.1AI score0.02198EPSS
SaveExploits1References12Affected Software1
Prion
Prion
•added 2022/10/14 4:15 p.m.•34 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

5CVSS8.1AI score0.02198EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2022/10/14 12:00 a.m.•41 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.9AI score0.02198EPSS
SaveExploits1References6
OSV
OSV
•added 2022/10/14 12:00 a.m.•30 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS7.3AI score
SaveExploits0References8
CVE
CVE
•added 2022/10/14 12:00 a.m.•325 views

CVE-2022-37603

CVE-2022-37603 describes a Regular Expression Denial of Service (ReDoS) in webpack-loader-utils, specifically in Function interpolateName.js (interpolateName.js) via the url variable. The issue affects loader-utils v2.0.0 and can lead to DoS conditions in applications that process input using thi...

7.5CVSS7.2AI score0.02198EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/14 12:00 a.m.•2 views

CVE-2022-37603: Inefficient Regular Expression Complexity

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS7.1AI score0.02198EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2022/10/14 12:00 a.m.•55 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02198EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/10/12 12:00 p.m.•10 views

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14937 more potentially affected by CVE-2022-37599 via loader-utils (>=1.0.0, <=1.4.1)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37599 Source advisory: OSV:GHSA-HHQ3-FF78-JV3G...

7.5CVSS6.5AI score0.02246EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2022/10/12 12:00 p.m.•58 views

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)

A regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils via the resourcePath variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or ta...

7.5CVSS7.2AI score0.02246EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
•added 2022/10/12 2:12 a.m.•104 views

Regular Expression Denial Of Service (ReDoS)

loader-utils is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the resourcePath variable in interpolateName.js, allowing an attacker to crash the application by providing a malicious input...

7.5CVSS7.3AI score0.02246EPSS
SaveExploits0References6Affected Software6
NVD
NVD
•added 2022/10/11 7:15 p.m.•31 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS0.02246EPSS
SaveExploits0References7
OSV
OSV
•added 2022/10/11 7:15 p.m.•10 views

DEBIAN-CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS7.4AI score0.02246EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/11 7:15 p.m.•36 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

5CVSS7.8AI score0.02246EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder