Lucene search
+L

3371 matches found

Veracode
Veracode
added 2022/06/28 8:35 a.m.39 views

Regular Expression Denial Of Service (ReDoS)

org.apache.tika:tika is vulnerable to regular expression denial of service ReDoS attacks. An attacker is able to cause denial of service conditions to the users who are running the StandardsExtractingContentHandler component, due to an insecure regular expression usage in setThreshold function by...

5.5CVSS5.3AI score0.0261EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
added 2022/06/28 8:8 a.m.29 views

Regular Expression Denial Of Service (ReDoS)

scniro-validator is vulnerable to regular expression denial of service. The vulnerability exists due to a lack of input validation which allows an attacker to crash the system via maliciously crafted email...

7.5CVSS4.6AI score0.01002EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2022/06/28 4:20 a.m.31 views

Regular Expression Denial Of Service (ReDoS)

repo-git-downloader is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for match repository urls in the getOptions function of option.js, allowing an attacker to crash the application by downloading maliciously crafted git...

7.5CVSS3.6AI score0.0112EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2022/06/27 4:24 p.m.31 views

Regular Expression Denial Of Service (ReDoS)

underscore-99xp is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to cause denial of service conditions via calling the vulnerable deepValueSearch function...

7.5CVSS4AI score0.01002EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2022/06/27 3:59 p.m.35 views

Regular Expression Denial Of Service (ReDoS)

validate-color is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to cause denial of service conditions via injecting crafted invalid rgba strings through validateHTMLColorRgb function...

7.5CVSS3.8AI score0.0112EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2022/06/27 1:15 p.m.21 views

CVE-2021-40900

A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...

7.5CVSS0.01002EPSS
SaveExploits1References1
Prion
Prion
added 2022/06/27 1:15 p.m.19 views

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...

5CVSS7.5AI score0.01002EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/06/27 1:15 p.m.26 views

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails...

5CVSS7.5AI score0.01002EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/27 11:38 a.m.26 views

CVE-2021-40901

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails...

7.7AI score0.01002EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/27 11:38 a.m.61 views

CVE-2021-40901

CVE-2021-40901 affects scniro-validator v1.0.1 and is described as a Regular Expression Denial of Service (ReDoS) vulnerability triggered when validating crafted invalid emails. The root cause is a faulty/overly backtracking-prone regex in the email validation path, which can cause high CPU usage...

7.5CVSS7.5AI score0.01002EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/27 11:33 a.m.34 views

CVE-2021-40900

A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...

7.7AI score0.01002EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/27 11:33 a.m.69 views

CVE-2021-40900

CVE-2021-40900 affects regexfn v1.0.5, where the isEmail validation can be abused by crafted invalid emails to trigger a ReDoS. Root cause: the regex handling allows excessive processing under certain inputs. Impact: potential application denial of service; CVSSv3.1 base score 7.5 (HIGH), network...

7.5CVSS7.5AI score0.01002EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/06/27 11:15 a.m.24 views

CVE-2021-40899

A Regular Expression Denial of Service ReDOS vulnerability was discovered in repo-git-downloader v0.1.1 when downloading crafted invalid git repositories...

7.5CVSS6.8AI score
SaveExploits0References1
NVD
NVD
added 2022/06/27 11:15 a.m.34 views

CVE-2021-40898

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...

7.5CVSS0.01002EPSS
SaveExploits1References1
Prion
Prion
added 2022/06/27 11:15 a.m.21 views

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...

5CVSS7.5AI score0.01002EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/27 10:58 a.m.33 views

CVE-2021-40899

A Regular Expression Denial of Service ReDOS vulnerability was discovered in repo-git-downloader v0.1.1 when downloading crafted invalid git repositories...

7.7AI score0.0112EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/27 10:58 a.m.68 views

CVE-2021-40899

CVE-2021-40899 : A ReDOS (Regular Expression Denial of Service) vulnerability exists in the open-source tool repo-git-downloader v0.1.1 when downloading crafted invalid Git repositories. The issue stems from improper regular expressions used in the code path handling repository URLs, enabling att...

7.5CVSS7.4AI score0.0112EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/06/27 10:34 a.m.143 views

CVE-2021-40898

CVE-2021-40898 affects scaffold-helper v1.2.0, where copying crafted invalid files triggers a Regular Expression Denial of Service (ReDoS). The issue stems from inefficient/insufficient checks in the regex paths used by getProcessedPath or getDynamicFilename during copy operations, enabling poten...

7.5CVSS7.4AI score0.01002EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2022/06/27 10:15 a.m.36 views

CVE-2021-40896

A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails...

7.5CVSS0.01002EPSS
SaveExploits1References1
NVD
NVD
added 2022/06/27 10:15 a.m.17 views

CVE-2021-40897

A Regular Expression Denial of Service ReDOS vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls...

7.5CVSS0.01002EPSS
SaveExploits1References1
Rows per page
Query Builder