Lucene search
+L

3366 matches found

Prion
Prion
added 2022/10/16 6:15 a.m.18 views

Code injection

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled...

5CVSS7.4AI score0.0159EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2022/10/16 6:15 a.m.40 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS6.7AI score0.0159EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/10/16 12:0 a.m.39 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

5.3CVSS7.7AI score0.0159EPSS
SaveExploits1References4
CVE
CVE
added 2022/10/16 12:0 a.m.361 views

CVE-2022-42969

CVE-2022-42969 affects the Python package py (through 1.11.0). The vulnerability allows a remote ReDoS via a crafted InfoSvnCommand argument in a Subversion repository, caused by mishandling of the info data, per connected IBM security bulletin. The description notes that this issue has been disp...

7.5CVSS7.3AI score0.0159EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/16 12:0 a.m.6 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

5.3CVSS7.5AI score0.0159EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/10/16 12:0 a.m.8 views

PT-2022-26687

Name of the Vulnerable Software and Affected Versions py versions through 1.11.0 Description The py library allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled...

8.7CVSS7.2AI score0.0159EPSS
SaveExploits1References47
Debian CVE
Debian CVE
added 2022/10/16 12:0 a.m.35 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS6.1AI score0.0159EPSS
SaveExploits1
OSV
OSV
added 2022/10/16 12:0 a.m.34 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

5.3CVSS5.3AI score0.0159EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2022/10/14 7:28 p.m.61 views

CVE-2022-3517

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS4.3AI score0.01751EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/10/14 7:0 p.m.67 views

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take ...

7.5CVSS8.1AI score0.02087EPSS
SaveExploits1References12Affected Software1
Prion
Prion
added 2022/10/14 4:15 p.m.28 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

5CVSS8.1AI score0.02087EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2022/10/14 12:0 a.m.307 views

CVE-2022-37603

CVE-2022-37603 describes a Regular Expression Denial of Service (ReDoS) in webpack-loader-utils, specifically in Function interpolateName.js (interpolateName.js) via the url variable. The issue affects loader-utils v2.0.0 and can lead to DoS conditions in applications that process input using thi...

7.5CVSS7.2AI score0.02087EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2022/10/14 12:0 a.m.28 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.9AI score0.02087EPSS
SaveExploits1References6
OSV
OSV
added 2022/10/14 12:0 a.m.25 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS7.3AI score0.02087EPSS
SaveExploits1References8
Debian CVE
Debian CVE
added 2022/10/14 12:0 a.m.49 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02087EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2022/10/12 12:0 p.m.53 views

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)

A regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils via the resourcePath variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or ta...

7.5CVSS7.2AI score0.02134EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
added 2022/10/12 2:12 a.m.97 views

Regular Expression Denial Of Service (ReDoS)

loader-utils is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the resourcePath variable in interpolateName.js, allowing an attacker to crash the application by providing a malicious input...

7.5CVSS7.3AI score0.02134EPSS
SaveExploits0References6Affected Software6
NVD
NVD
added 2022/10/11 7:15 p.m.26 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS0.02134EPSS
SaveExploits0References7
OSV
OSV
added 2022/10/11 7:15 p.m.5 views

DEBIAN-CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS7.4AI score0.02134EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/11 7:15 p.m.30 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

5CVSS7.8AI score0.02134EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder