Lucene search
+L

3366 matches found

Cvelist
Cvelist
added 2022/06/27 9:48 a.m.31 views

CVE-2021-40896

A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails...

7.7AI score0.01002EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/27 9:36 a.m.62 views

CVE-2021-40895

CVE-2021-40895 affects todo-regex v0.1.1 and is a Regular Expression Denial of Service (ReDOS) vulnerability triggered by crafted invalid TODO statements. Impact is denial of service; no exploit details provided beyond this. Remediation suggestion found in PT-2022-11323: for v0.1.1, update to a n...

7.5CVSS7.4AI score0.01002EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2022/06/24 10:15 p.m.24 views

CVE-2021-40894

A Regular Expression Denial of Service ReDOS vulnerability was discovered in underscore-99xp v1.7.2 when the deepValueSearch function is called...

7.5CVSS0.01002EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/24 9:9 p.m.85 views

CVE-2021-40894

CVE-2021-40894 affects underscore-99xp v1.7.2, where the deepValueSearch function can trigger a Regular Expression Denial of Service (ReDOS). Multiple sources (CNVD, NVD, Veracode, CNVD Chinese entry) describe a vulnerability in the deepValueSearch path that could lead to denial of service. The i...

7.5CVSS7.5AI score0.01002EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/06/24 5:15 p.m.19 views

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...

5CVSS7.5AI score0.01166EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/24 4:12 p.m.26 views

CVE-2021-40893

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...

7.7AI score0.01166EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/24 4:12 p.m.70 views

CVE-2021-40893

CVE-2021-40893 describes a ReDOS vulnerability in the Node.js library validate-data v0.1.1 triggered while validating crafted invalid emails. Root cause: improper handling during email validation leads to excessive backtracking. Impact: potential Denial of Service. Affected component: validate-da...

7.5CVSS7.4AI score0.01166EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2022/06/24 2:15 p.m.21 views

CVE-2021-40892

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...

7.5CVSS0.0112EPSS
SaveExploits1References1
Prion
Prion
added 2022/06/24 2:15 p.m.24 views

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...

5CVSS7.5AI score0.0112EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/06/24 1:29 p.m.68 views

CVE-2021-40892

CVE-2021-40892 affects validate-color version 2.1.0. A Regular Expression Denial of Service (ReDoS) occurs when handling crafted invalid rgb(a) strings, attributed to the validateHTMLColorRgb pathway. Impact described as denial of service; no explicit exploit details beyond input crafting. No con...

7.5CVSS7.4AI score0.0112EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/24 1:29 p.m.26 views

CVE-2021-40892

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...

7.7AI score0.0112EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/06/24 12:0 a.m.7 views

PT-2022-11322 · Unknown · Underscore-99Xp

Name of the Vulnerable Software and Affected Versions: underscore-99xp version 1.7.2 Description: A Regular Expression Denial of Service ReDOS issue was found when the deepValueSearch function is called. Recommendations: For underscore-99xp version 1.7.2, consider disabling the deepValueSearch...

7.5CVSS7.5AI score0.01002EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2022/06/22 12:0 a.m.41 views

EulerOS 2.0 SP8 : ruby (EulerOS-SA-2022-1951)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2....

7.5CVSS7.6AI score0.04267EPSS
SaveExploits1References3
Hacker One
Hacker One
added 2022/06/20 2:31 p.m.152 views

Nextcloud: @nextcloud/logger NPM package brings vulnerable ansi-regex version

Summary: Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS due to the sub-patterns \;? and ?:;-a-zA-Z\d\/&.:=?%@. Details: Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its original and legitimate...

7.8CVSS1.6AI score0.03552EPSS
SaveExploits1
Veracode
Veracode
added 2022/06/20 10:45 a.m.28 views

Regular Expression Denial Of Service (ReDoS)

pythonldap is vulnerable to regular expression denial of service. The vulnerability exists in tokenizer.py due to insufficient regular expression in the schema tokenizer which allows an attacker to send a crafted regex input causing an application crash...

6.5CVSS4.3AI score0.01713EPSS
SaveExploits0References5Affected Software2
CVE
CVE
added 2022/06/18 3:27 p.m.161 views

CVE-2021-46823

CVE-2021-46823 affects python-ldap prior to 3.4.0. The vulnerability is a ReDoS in the LDAP schema parser when ldap.schema processes untrusted definitions, enabling a remote authenticated attacker to cause a denial of service. Public references in the provided documents consistently tie this to p...

6.5CVSS6AI score0.01713EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/06/15 12:0 a.m.17 views

GHSA-38J3-6FM8-PFGC Regular expression denial of service in Delight Nashorn Sandbox

An issue was discovered in Delight Nashorn Sandbox. There is an ReDoS vulnerability that can be exploited to launching a denial of service DoS attack...

7.5CVSS7.3AI score0.0097EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2022/06/15 12:0 a.m.48 views

Regular expression denial of service in Delight Nashorn Sandbox

An issue was discovered in Delight Nashorn Sandbox. There is an ReDoS vulnerability that can be exploited to launching a denial of service DoS attack...

7.5CVSS2.8AI score0.0097EPSS
SaveExploits1References7Affected Software1
RedhatCVE
RedhatCVE
added 2022/06/14 3:29 p.m.34 views

CVE-2021-21252

A flaw was found in jQuery-validate. There is an issue where it contains one or more regular expressions vulnerable to a Regular Expression Denial of Service ReDoS...

7.5CVSS3.7AI score0.03437EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/06/14 2:15 p.m.5 views

CVE-2021-40660

An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of service DoS attack...

7.5CVSS7.1AI score0.0097EPSS
SaveExploits1References2
Rows per page
Query Builder