3362 matches found
Unspecified vulnerability in calibre
Calibre is an open source free all-in-one eBook reading management and format conversion tool. A security vulnerability exists in calibre before 5.32.0, which stems from the inclusion of regular expressions vulnerable to ReDoS Regular Expression Denial of Service attacks in htmlpreprocessrules in...
ReDos vulnerability on guest checkout email validation
Impact Denial of service vulnerability that could be exploited during a guest checkout. The regular expression used to validate a guest order's email was subject to exponential backtracking through a fragment like a.a.. Before the patch, it can be reproduced in the console like this: ruby irbmain...
CVE-2021-43805 ReDos vulnerability on guest checkout email validation
Solidus is a free, open-source ecommerce platform built on Rails. Versions of Solidus prior to 3.1.4, 3.0.4, and 2.11.13 have a denial of service vulnerability that could be exploited during a guest checkout. The regular expression used to validate a guest order's email was subject to exponential...
Inefficient Regular Expression Complexity in nltk/nltk
Description nltk is vulnerable to ReDoS attack because of ^-?0-9+.0-9+?$ regex. If attacker succeeds to use malicious payload against RegexpTagger used in function getpostagger and maltregextagger, it will cause a nasty DoS. Proof of Concept // PoC.py import re, time pattern =...
CVE-2021-44686
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service in htmlpreprocessrules in ebooks/conversion/preprocess.py...
CVE-2021-44686
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service in htmlpreprocessrules in ebooks/conversion/preprocess.py...
CVE-2021-44686
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service in htmlpreprocessrules in ebooks/conversion/preprocess.py...
ReDos vulnerability on guest checkout email validation
Impact Denial of service vulnerability that could be exploited during a guest checkout. The regular expression used to validate a guest order's email was subject to exponential backtracking through a fragment like a.a.. Before the patch, it can be reproduced in the console like this: ruby irbmain...
CVE-2021-44686
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service in htmlpreprocessrules in ebooks/conversion/preprocess.py...
CVE-2021-44686
CVE-2021-44686 affects calibre before 5.32.0. Affected component: html_preprocess_rules in ebooks/conversion/preprocess.py, where a regular expression is vulnerable to ReDoS. Impact is denial of service under crafted input. Mitigation: upgrade calibre to version 5.32.0 or newer (as per linked adv...
openSUSE: Security Advisory for python-Pygments (openSUSE-SU-2021:1521-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2021:1521-1 Security update for python-Pygments
This update for python-Pygments fixes the following issues: - CVE-2021-27291: Fixed ReDoS via crafted malicious input bsc1184812. This update was imported from the SUSE:SLE-15-SP1:Update update project...
Security update for python-Pygments (important)
openSUSE Security Update: Security update for python-Pygments Announcement ID: openSUSE-SU-2021:1521-1 Rating: important References: 1184812 Cross-References: CVE-2021-27291 CVSS scores: CVE-2021-27291 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-27291 SUSE: 7.5...
XStream: ReDoS vulnerability
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is affected, who followed the recommendation to setup...
openSUSE: Security Advisory for python-Pygments (openSUSE-SU-2021:3839-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE: Security Advisory for python-Pygments (openSUSE-SU-2021:3841-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE: Security Advisory for python-sqlparse (openSUSE-SU-2021:3857-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED15 / SLES15 Security Update : python-Pygments (SUSE-SU-2021:3839-1)
The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:3839-1 advisory. - CVE-2021-27291: Fixed ReDoS via crafted malicious input bsc1184812. Tenable has extracted the preceding description block directly from the...
OPENSUSE-SU-2021:3857-1 Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2021-32839: Fixed ReDoS via regular expression in StripComments filter bsc1190741...