Lucene search
+L

4955 matches found

Github Security Blog
Github Security Blog
•added 2022/11/10 12:01 p.m.•43 views

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the getfiletransfertype method...

7.5CVSS7.3AI score0.0088EPSS
SaveExploits1References6Affected Software1
Github Security Blog
Github Security Blog
•added 2022/11/10 12:01 p.m.•32 views

pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.3AI score0.0088EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2022/11/10 7:32 a.m.•23 views

Regular Expression Denial Of Service (ReDoS)

cleo is vulnerable to regular expression denial of serviceReDoS attacks. A remote attacker is able to cause denial of service conditions via suppling a maliciously crafted input through the Table.setrows method in command.py...

7.5CVSS7AI score0.00992EPSS
SaveExploits1References2Affected Software1
FreeBSD
FreeBSD
•added 2022/11/10 12:00 a.m.•24 views

py-pymatgen -- regular expression denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.5AI score0.0088EPSS
SaveExploits1References1
NVD
NVD
•added 2022/11/09 8:15 p.m.•33 views

CVE-2022-42965

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

7.5CVSS0.0088EPSS
SaveExploits1References1
NVD
NVD
•added 2022/11/09 8:15 p.m.•35 views

CVE-2022-42966

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS0.00992EPSS
SaveExploits1References1
osv_pysec
osv_pysec
•added 2022/11/09 8:15 p.m.•27 views

PYSEC-2022-43178

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.5AI score0.00992EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/11/09 8:15 p.m.•13 views

CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.5AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2022/11/09 8:15 p.m.•34 views

CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.1AI score0.0088EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2022/11/09 8:15 p.m.•18 views

UBUNTU-CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS5.9AI score0.0088EPSS
SaveExploits1References3
Prion
Prion
•added 2022/11/09 8:15 p.m.•24 views

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

5CVSS7.4AI score0.0088EPSS
SaveExploits1References1
Prion
Prion
•added 2022/11/09 8:15 p.m.•33 views

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

5CVSS7.5AI score0.0088EPSS
SaveExploits1References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2022/11/09 8:15 p.m.•14 views

UBUNTU-CVE-2022-42966

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.2AI score0.00992EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2022/11/09 8:15 p.m.•30 views

CVE-2022-42966

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.1AI score0.00992EPSS
SaveExploits1References2
Prion
Prion
•added 2022/11/09 8:15 p.m.•21 views

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

5CVSS7.5AI score0.00992EPSS
SaveExploits1References1
CVE
CVE
•added 2022/11/09 12:00 a.m.•114 views

CVE-2022-42964

CVE-2022-42964 affects the Python package pymatgen (PyPI). The vulnerability arises in the function/flow related to parsing Gaussian inputs, specifically GaussianInput.from_string, where crafted input can trigger an exponential ReDoS in the regular expression handling. This condition can lead to ...

7.5CVSS6.5AI score0.0088EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•4 views

CVE-2022-42964: Inefficient Regular Expression Complexity

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS5.9AI score0.0088EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/11/09 12:00 a.m.•7 views

CVE-2022-42964 Exponential ReDoS in pymatgen leads to denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

5.9CVSS6.8AI score0.0088EPSS
SaveExploits1References1
Mend
Mend
•added 2022/11/09 12:00 a.m.•5 views

CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

8.2CVSS0.0088EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2022/11/09 12:00 a.m.•57 views

pymatgen security vulnerabilities

pymatgen is an open source Python library for material analysis. A security vulnerability exists in pymatgen that can be exploited to trigger an exponential ReDoS when an attacker provides arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.4AI score0.0088EPSS
SaveExploits1References2
Rows per page
Query Builder