Lucene search
K

3332 matches found

Tenable Nessus
Tenable Nessus
added 2021/09/27 12:0 a.m.18 views

EulerOS 2.0 SP5 : python-jinja2 (EulerOS-SA-2021-2516)

According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre regex operator an...

5.3CVSS7.1AI score0.03546EPSS
Exploits1References2
Huntr
Huntr
added 2021/09/24 3:54 p.m.7 views

Inefficient Regular Expression Complexity in crankyoldgit/irremoteesp8266

✍️ Description The IRremoteESP8266 package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide crafted input to the extractsupports function in the file scrapesupporteddevices.py may cause an application to consume an excessive amount of CPU. Below...

0.6AI score
Exploits0
RedhatCVE
RedhatCVE
added 2021/09/24 9:25 a.m.36 views

CVE-2021-3807

A regular expression denial of service ReDoS vulnerability was found in nodejs-ansi-regex. This could possibly cause an application using ansi-regex to use an excessive amount of CPU time when matching crafted ANSI escape codes...

7.8CVSS2.9AI score0.03304EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2021/09/24 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2021-2482)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.03546EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/09/24 12:0 a.m.16 views

EulerOS 2.0 SP8 : python-jinja2 (EulerOS-SA-2021-2482)

According to the versions of the python-jinja2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre regex operator a...

5.3CVSS7.1AI score0.03546EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2021/09/23 11:14 p.m.48 views

Regular Expression Denial of Service in Leo Editor

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...

7.5CVSS7.2AI score0.01193EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2021/09/23 11:14 p.m.24 views

GHSA-X38Q-XG2H-RXGX Regular Expression Denial of Service in Leo Editor

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...

8.7CVSS7.3AI score0.01193EPSS
Exploits1References6
Huntr
Huntr
added 2021/09/23 3:19 p.m.12 views

Inefficient Regular Expression Complexity in trentm/python-markdown2

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in markdown2. The ReDoS vulnerability is mainly due to the sub-pattern with quantified overlapping adjacency and can be exploited with the following code. Proof of Concept // PoC.py import markdown2 from...

0.5AI score
Exploits0
CloudLinux
CloudLinux
added 2021/09/23 12:55 p.m.311 views

Fix of CVE: CVE-2018-20852, CVE-2020-8492, CVE-2020-26116, CVE-2020-27619

Add Oracle Linux distribution in platform.py - CVE-2018-20852: Prefix dot in domain for proper subdomain validation - CVE-2020-8492: Python allows an HTTP server to conduct Regular Expression Denial of Service ReDoS attacks against a client - CVE-2020-26116: http.client allows CRLF injection if...

7.5CVSS2.6AI score0.08235EPSS
Exploits3References1
OSV
OSV
added 2021/09/22 8:15 p.m.12 views

CVE-2020-23478

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...

7.5CVSS7.4AI score
Exploits0References2
NVD
NVD
added 2021/09/22 8:15 p.m.19 views

CVE-2020-23478

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...

7.5CVSS0.01193EPSS
Exploits1References2
OSV
OSV
added 2021/09/22 8:15 p.m.9 views

CVE-2020-23469

gmate v0.12+bionic contains a regular expression denial of service ReDoS vulnerability in the gedit3 plugin...

7.5CVSS6.8AI score
Exploits0References2
NVD
NVD
added 2021/09/22 8:15 p.m.11 views

CVE-2020-23469

gmate v0.12+bionic contains a regular expression denial of service ReDoS vulnerability in the gedit3 plugin...

7.5CVSS0.0118EPSS
Exploits1References2
Prion
Prion
added 2021/09/22 8:15 p.m.10 views

Design/Logic Flaw

gmate v0.12+bionic contains a regular expression denial of service ReDoS vulnerability in the gedit3 plugin...

5CVSS7.4AI score0.0118EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2021/09/22 8:15 p.m.11 views

PYSEC-2021-338

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...

7.5CVSS3.4AI score0.01193EPSS
Exploits1References2
CVE
CVE
added 2021/09/22 7:23 p.m.64 views

CVE-2020-23478

CVE-2020-23478 affects Leo Editor v6.2.1 with a regular expression Denial of Service (ReDoS) vulnerability in the component plugins/importers/dart.py. The connected documents confirm this root cause but do not provide details on affected versions beyond v6.2.1, exploit methods, impact scope, or a...

7.5CVSS7.3AI score0.01193EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/09/22 7:23 p.m.45 views

CVE-2020-23478

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...

7.4AI score0.01193EPSS
Exploits1References2
CVE
CVE
added 2021/09/22 7:22 p.m.53 views

CVE-2020-23469

CVE-2020-23469 affects gmate v0.12+bionic via a ReDoS vulnerability in the gedit3 plugin. The underlying issue is a regular-expression denial of service in the plugin, enabling potential denial of service conditions. Public references in the provided documents name gmate/gedit3 as the vulnerable ...

7.5CVSS7.4AI score0.0118EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/09/22 7:22 p.m.12 views

CVE-2020-23469

gmate v0.12+bionic contains a regular expression denial of service ReDoS vulnerability in the gedit3 plugin...

7.5AI score0.0118EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2021/09/22 12:0 a.m.3 views

PT-2021-10900 · Gnome +1 · Gedit3 +1

Name of the Vulnerable Software and Affected Versions: gmate version 0.12+bionic Description: The issue is a regular expression denial of service ReDoS vulnerability in the gedit3 plugin. This vulnerability can cause a denial of service. Recommendations: For gmate version 0.12+bionic, at the...

7.5CVSS7.3AI score0.0118EPSS
Exploits1References5
Rows per page
Query Builder