Lucene search
K

3333 matches found

OSV
OSV
added 2022/11/10 12:1 p.m.21 views

GHSA-2P9H-CCW7-33GF cleo is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

5.9CVSS6.4AI score0.00909EPSS
Exploits1References7
Github Security Blog
Github Security Blog
added 2022/11/10 12:1 p.m.23 views

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the getfiletransfertype method...

7.5CVSS7.3AI score0.00816EPSS
Exploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/11/10 12:1 p.m.19 views

cleo is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.3AI score0.00909EPSS
Exploits1References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/11/10 12:1 p.m.17 views

pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.3AI score0.00816EPSS
Exploits1References4Affected Software1
Veracode
Veracode
added 2022/11/10 7:32 a.m.15 views

Regular Expression Denial Of Service (ReDoS)

cleo is vulnerable to regular expression denial of serviceReDoS attacks. A remote attacker is able to cause denial of service conditions via suppling a maliciously crafted input through the Table.setrows method in command.py...

7.5CVSS7AI score0.00909EPSS
Exploits1References2Affected Software1
FreeBSD
FreeBSD
added 2022/11/10 12:0 a.m.18 views

py-pymatgen -- regular expression denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.5AI score0.00816EPSS
Exploits1References1
NVD
NVD
added 2022/11/09 8:15 p.m.15 views

CVE-2022-42965

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

7.5CVSS0.00816EPSS
Exploits1References1
NVD
NVD
added 2022/11/09 8:15 p.m.20 views

CVE-2022-42966

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS0.00909EPSS
Exploits1References1
OSV
OSV
added 2022/11/09 8:15 p.m.6 views

PYSEC-2022-43178

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.5AI score0.00909EPSS
Exploits1References3
OSV
OSV
added 2022/11/09 8:15 p.m.5 views

CVE-2022-42966

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.5AI score
Exploits0References1
OSV
OSV
added 2022/11/09 8:15 p.m.3 views

CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.5AI score
Exploits0References1
UbuntuCve
UbuntuCve
added 2022/11/09 8:15 p.m.21 views

CVE-2022-42966

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.1AI score0.00909EPSS
Exploits1References2
Prion
Prion
added 2022/11/09 8:15 p.m.13 views

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

5CVSS7.5AI score0.00909EPSS
Exploits1References1
Prion
Prion
added 2022/11/09 8:15 p.m.13 views

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

5CVSS7.4AI score0.00816EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/11/09 8:15 p.m.19 views

CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.1AI score0.00816EPSS
Exploits1References2
OSV
OSV
added 2022/11/09 8:15 p.m.1 views

UBUNTU-CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS5.9AI score0.00816EPSS
Exploits1References3
OSV
OSV
added 2022/11/09 8:15 p.m.0 views

UBUNTU-CVE-2022-42966

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.2AI score0.00909EPSS
Exploits1References3
Prion
Prion
added 2022/11/09 8:15 p.m.16 views

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

5CVSS7.5AI score0.00816EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/09 12:0 a.m.4 views

CVE-2022-42966 Exponential ReDoS in cleo leads to denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

5.9CVSS6.8AI score0.00909EPSS
Exploits1References1
CVE
CVE
added 2022/11/09 12:0 a.m.93 views

CVE-2022-42966

CVE-2022-42966 concerns the PyPI package cleo and an exponential ReDoS (Regular Expression Denial of Service) that can be triggered when an attacker provides arbitrary input to the method Table.set_rows . The connected documents corroborate that the vulnerability arises from the way input is proc...

7.5CVSS6.5AI score0.00909EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder