Lucene search
+L

3780 matches found

Hacker One
Hacker One
added 2022/11/13 8:26 p.m.11 views

GitLab: ReDoS due to device-detector parsing user agents

A ReDoS vulnerability was discovered in how GitLab parsed user agents, which could lead to Denial of Service on affected instances...

6.7AI score
SaveExploits0
OSV
OSV
added 2022/11/10 12:01 p.m.64 views

GHSA-2P9H-CCW7-33GF cleo is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

5.9CVSS6.4AI score0.00953EPSS
SaveExploits1References8
OSV
OSV
added 2022/11/10 12:01 p.m.31 views

GHSA-5JQP-885W-XJ32 pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

5.9CVSS7.3AI score0.00862EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/11/10 12:01 p.m.25 views

cleo is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.3AI score0.00953EPSS
SaveExploits1References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/11/10 12:01 p.m.36 views

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the getfiletransfertype method...

7.5CVSS7.3AI score0.00862EPSS
SaveExploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/11/10 12:01 p.m.24 views

pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.3AI score0.00862EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2022/11/10 7:32 a.m.20 views

Regular Expression Denial Of Service (ReDoS)

cleo is vulnerable to regular expression denial of serviceReDoS attacks. A remote attacker is able to cause denial of service conditions via suppling a maliciously crafted input through the Table.setrows method in command.py...

7.5CVSS7AI score0.00953EPSS
SaveExploits1References2Affected Software1
FreeBSD
FreeBSD
added 2022/11/10 12:00 a.m.20 views

py-pymatgen -- regular expression denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.5AI score0.00862EPSS
SaveExploits1References1
NVD
NVD
added 2022/11/09 8:15 p.m.24 views

CVE-2022-42965

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

7.5CVSS0.00862EPSS
SaveExploits1References1
NVD
NVD
added 2022/11/09 8:15 p.m.31 views

CVE-2022-42966

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS0.00953EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/09 8:15 p.m.12 views

PYSEC-2022-43178

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.5AI score0.00953EPSS
SaveExploits1References3
OSV
OSV
added 2022/11/09 8:15 p.m.8 views

CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.5AI score
SaveExploits0References1
OSV
OSV
added 2022/11/09 8:15 p.m.9 views

UBUNTU-CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS5.9AI score0.00862EPSS
SaveExploits1References3
Prion
Prion
added 2022/11/09 8:15 p.m.24 views

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

5CVSS7.5AI score0.00862EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2022/11/09 8:15 p.m.27 views

CVE-2022-42966

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.1AI score0.00953EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2022/11/09 8:15 p.m.32 views

CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.1AI score0.00862EPSS
SaveExploits1References2
Prion
Prion
added 2022/11/09 8:15 p.m.21 views

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

5CVSS7.4AI score0.00862EPSS
SaveExploits1References1
Prion
Prion
added 2022/11/09 8:15 p.m.18 views

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

5CVSS7.5AI score0.00953EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/09 8:15 p.m.7 views

UBUNTU-CVE-2022-42966

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

7.5CVSS7.2AI score0.00953EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/11/09 12:00 a.m.45 views

pymatgen 安全漏洞

pymatgen is an open source Python library for material analysis. A security vulnerability exists in pymatgen that can be exploited to trigger an exponential ReDoS when an attacker provides arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.4AI score0.00862EPSS
SaveExploits1References2
Rows per page
Query Builder