3362 matches found
CVE-2021-41817
CVE-2021-41817 is a Ruby-related ReDoS in Date parsing. The vulnerability affects Ruby’s date parsing pathways (notably date parsing methods) up to versions around 3.2.0, enabling denial-of-service via crafted date strings. The fixed releases cited in the sources are 3.2.1, 3.1.2, 3.0.2, and 2.0....
CVE-2021-41817
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...
CVE-2021-41817
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...
CVE-2021-41817
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...
Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2021-2877)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated calibre packages fix security vulnerability
ReDoS vulnerability in htmlpreprocessrules in ebooks/conversion/preprocess.py...
MGASA-2021-0593 Updated calibre packages fix security vulnerability
ReDoS vulnerability in htmlpreprocessrules in ebooks/conversion/preprocess.py...
EulerOS Virtualization 3.0.2.0 : python-jinja2 (EulerOS-SA-2021-2840)
According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre...
EulerOS Virtualization 3.0.2.0 : python (EulerOS-SA-2021-2825)
According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, wh...
Debian DLA-2853-1 : ruby2.3 - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2853 advisory. - Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2...
Regular Expression Denial Of Service (ReDoS)
parse-link-header is vulnerable to regular expression denial of service. The usage of an insecure 'checkHeader' function allows an attacker to cause a denial of service condition via a malicious URL string...
cve-search has an unspecified vulnerability
Cve-Search is a tool that performs local searches for known vulnerabilities. It is used for searching, indexing, correlating and managing software vulnerabilities. cve-search versions prior to 4.1.0 have a security vulnerability that stems from lib/DatabaseLayer.py allowing regular expression...
EulerOS 2.0 SP8 : python3 (EulerOS-SA-2021-2813)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the...
EulerOS 2.0 SP8 : python2 (EulerOS-SA-2021-2812)
According to the versions of the python2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the...
CVE-2021-23490
The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...
Design/Logic Flaw
The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...
CVE-2021-23490
CVE-2021-23490 affects the npm package parse-link-header . The issue is a Regular Expression Denial of Service (ReDoS) triggered by the checkHeader function in versions prior to 2.0.0 . Reported impact is CPU exhaustion that can degrade service or cause a denial of service. Remediation : upgrade ...
Regular Expression Denial Of Service (ReDoS)
nltk is vulnerable to regular expression denial of service. The vulnerability exists in PunktSentenceTokenizer function in punkt.py which allows an attacker to cause an application crash...
Regular Expression Denial Of Service (ReDoS)
cvesearch is vulnerable to regular expression denial of service. The vulnerability exists due to lack of sanitization of user inputs in cvesForCPE function of DatabaseLayer.py which allows a malicious user to cause a ReDoS...