4062 matches found
Regular Expression Denial Of Service (ReDoS)
vue-moment is vulnerable to regular expression denial of service ReDoS attacks. These attacks are possible because it has a vulnerable static dependency which uses a flawed regular expression taking long time in matching dates for long strings...
Python -- Regular Expression DoS attack against client
Ben Caller and Matt Schwager reports: Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service ReDoS attacks against a client because of urllib.request.AbstractBasicAuthHandler...
Regular Expression Denial Of Service (ReDoS)
diff is vulnerable to regular expression denial of service ReDoS. The vulnerability exists due to improper use of regular expression to parse data from the fileHeader parameter in parseFileHeader, allowing an attacker to cause a denial of service condition by submitting a malicious file header...
Regular Expression Denial Of Service (ReDoS)
webrick is vulenrable to regex denial of service. An attacker is able to crash the application by submitting malicious strings within the Authorization header to the authentication module...
Denial Of Service (DoS)
OpenJDK is vulnerable to Regular Expression Denial of Service ReDoS. It is due to unexpected exception thrown during regular expression processing in Nashorn...
Regular Expression Denial Of Service (ReDoS)
mimer is vulnerable to regular expression denial of service ReDoS. The function extGetter uses an incorrect regular expression to split file path input from the user, causing an application crash via intensive CPU and memory consumption when parsing malicious file path...
PT-2019-5583 · Python +10 · Python +10
Name of the Vulnerable Software and Affected Versions: Python versions 2.7.16 and earlier, 3.x through 3.6.9, and 3.7.x through 3.7.4 Description: The issue is related to the documentation XML-RPC server in Python, which is vulnerable to cross-site scripting XSS attacks via the server title field...
larvitlog (>=0.1.0, <=0.3.4), larvituser-api (>=0.2.0, <=0.4.0) potentially affected by CVE-2019-5479 via larvitbase-api (>=0.2.2, <=0.5.1)
larvitbase-api NPM version =0.2.2, =0.1.0, =0.2.0, =0.4.0 Source cves: CVE-2019-5479 Source advisory: OSV:GHSA-XF27-JQWV-GF3R...
Metasploit HTTP(S) handler DoS
This module exploits the Metasploit HTTPS handler by sending a specially crafted HTTP request that gets added as a resource handler. Resources which come from the external connections are evaluated as RegEx in the handler server. Specially crafted input can trigger Gentle, Soft and Hard DoS. Test...
Denial of Service in rgb2hex
All versions of rgb2hex are vulnerable to Regular Expression Denial of Service ReDoS when an attacker can pass in a specially crafted invalid color value. Recommendation Update to version 0.1.6 or later...
Regular Expression Denial Of Service (ReDoS)
Django is vulnerable to regular expression denial of service ReDoS. The attack is due to lack of validation of inputs to a regular expression in django.utils.text.Truncator's chars and words methods, eventually causing an application crash if the input html=True is provided...
Regular Expression Denial Of Service (ReDoS)
gettext-parser is vulnerable to Regular Expression Denial Of Service. The library contains a regular expression that is vulnerable to catastrophic backtracking. When presented with a malicious long string, the regex will run for an exponentially long time, potentially causing the application to...
Regular Expression Denial Of Service (ReDoS)
marked is vulnerable to regular expression denial of service DoS. The attack is possible because it does not use efficient link tags in regular expression, thereby leading to a high CPU usage if an attacker parses an input link with nested parenthesis containing a large number of link tokens to t...
wicked-saml (>=0.10.0, <=0.11.3) potentially affected by CVE-2017-11429 via saml2-js (1.10.0)
saml2-js NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on saml2-js and may be impacted: - wicked-saml =0.10.0, =0.11.3 Source cves: CVE-2017-11429 Source advisory: OSV:GHSA-5P5W-J3G7-W4WV...
CVE-2018-14733
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
CVE-2018-14733
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
Design/Logic Flaw
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
CVE-2018-14733
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
CVE-2018-14733
The CVE-2018-14733 issue affects Odoo, specifically the OCA dbfilter_from_header module, impacting Odoo 8.x–11.x. The root cause is a regular expression denial of service (ReDoS) under certain circumstances, exposed via the dbfilter_from_header plugin. Public references in Red Hat, Debian, and CN...
