Lucene search
K

3332 matches found

OSV
OSV
added 2021/11/09 8:24 a.m.26 views

ALSA-2021:4150 Moderate: python36:3.6 security and bug fix update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS7.9AI score0.03832EPSS
Exploits1References3
AlmaLinux
AlmaLinux
added 2021/11/09 8:24 a.m.66 views

Moderate: python36:3.6 security and bug fix update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS7.9AI score0.03832EPSS
Exploits1References3
OSV
OSV
added 2021/11/09 8:24 a.m.26 views

RLSA-2021:4150 Moderate: python36:3.6 security and bug fix update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS7.8AI score0.03832EPSS
Exploits1References5
OSV
OSV
added 2021/11/09 8:20 a.m.31 views

ALSA-2021:4139 Moderate: resource-agents security, bug fix, and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Security Fixes: python-pygments: Infinite loop in SML lexer may lead to DoS CVE-2021-202...

7.5CVSS7.8AI score0.03832EPSS
Exploits1References2
AlmaLinux
AlmaLinux
added 2021/11/09 8:20 a.m.64 views

Moderate: resource-agents security, bug fix, and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Security Fixes: python-pygments: Infinite loop in SML lexer may lead to DoS CVE-2021-202...

7.5CVSS7.9AI score0.03832EPSS
Exploits1References2
Rockylinux
Rockylinux
added 2021/11/09 8:20 a.m.42 views

resource-agents security, bug fix, and enhancement update

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...

7.5CVSS7.8AI score0.03832EPSS
Exploits1
OSV
OSV
added 2021/11/09 8:20 a.m.35 views

RLSA-2021:4139 Moderate: resource-agents security, bug fix, and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Security Fixes: python-pygments: Infinite loop in SML lexer may lead to DoS CVE-2021-202...

7.5CVSS7.8AI score0.03832EPSS
Exploits1References18
Veracode
Veracode
added 2021/11/03 2:16 a.m.30 views

Regular Expression Denial Of Service (ReDoS)

validator is vulnerable to regular expression denial of service ReDoS. An attacker is able to slow down the application or causes an application crash via a malicious string and regex /\s+$/g via the rtrim function due to lack of safer regular expression to escape the string input from attacker...

7.5CVSS4AI score0.01652EPSS
Exploits1References3Affected Software2
OpenVAS
OpenVAS
added 2021/11/03 12:0 a.m.10 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2641)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.02878EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/11/02 12:0 a.m.31 views

EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2021-2641)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS7AI score0.02878EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2021/11/01 8:35 p.m.14 views

CVE-2021-41186

Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string ca...

7.5CVSS2.6AI score0.0206EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2021/11/01 7:16 p.m.28 views

ReDoS vulnerability in parser_apache2

Impact parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string can spend too much time in a regular expression, resulting in the potential for a DoS attack. Patches v1.14.2...

7.5CVSS2.5AI score0.0206EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2021/11/01 7:16 p.m.17 views

GHSA-HWHF-64MH-R662 ReDoS vulnerability in parser_apache2

Impact parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string can spend too much time in a regular expression, resulting in the potential for a DoS attack. Patches v1.14.2...

5.9CVSS7.3AI score0.0206EPSS
Exploits0References7
Veracode
Veracode
added 2021/11/01 8:32 a.m.18 views

Regular Expression Denial Of Service (ReDoS)

fluentd is vulnerable to regular expression denial of service ReDoS attacks. An attacker is able to inject a certain pattern of string via a broken apache log that would cause a ReDoS attack when the parsed malicious string spends too much time in the regular expression...

7.5CVSS5.2AI score0.0206EPSS
Exploits0References4Affected Software1
RubySec
RubySec
added 2021/11/01 12:0 a.m.17 views

ReDoS vulnerability in parser_apache2

Impact parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string can spend too much time in a regular expression, resulting in the potential for a DoS attack. Patches v1.14.2...

7.5CVSS6.7AI score0.0206EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/10/31 3:7 p.m.5 views

OPENSUSE-SU-2021:1418-1 Security update for python

This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading DoS after a http 100. bsc1189241 - CVE-2021-3733: Fixed ReDoS in urllib.request. bsc1189287 This update was imported from the SUSE:SLE-15:Update update project...

7.5CVSS7AI score0.11586EPSS
Exploits2References5
OSV
OSV
added 2021/10/29 2:15 p.m.12 views

CVE-2021-41186

Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string ca...

7.5CVSS7.3AI score
Exploits0References3
NVD
NVD
added 2021/10/29 2:15 p.m.8 views

CVE-2021-41186

Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string ca...

7.5CVSS0.0206EPSS
Exploits0References3
Prion
Prion
added 2021/10/29 2:15 p.m.11 views

Design/Logic Flaw

Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string ca...

5CVSS7.3AI score0.0206EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/10/29 1:40 p.m.15 views

CVE-2021-41186 ReDoS vulnerability in parser_apache2

Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string ca...

5.9CVSS7.5AI score0.0206EPSS
Exploits0References3
Rows per page
Query Builder