3765 matches found
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2021-2564)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of...
EulerOS 2.0 SP9 : python-jinja2 (EulerOS-SA-2021-2562)
According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre regex operator an...
PT-2021-22014 · Pypi +3 · Nltk +3
Name of the Vulnerable Software and Affected Versions: nltk affected versions not specified Description: The nltk package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide input to the checkComparisonBlock function, specifically the read comparison...
EulerOS 2.0 SP5 : python-jinja2 (EulerOS-SA-2021-2516)
According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre regex operator an...
CentOS 8 : nodejs:14 (CESA-2021:3666)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3666 advisory. - nodejs: Use-after-free on close http2 on stream canceling CVE-2021-22930, CVE-2021-22940 - nodejs: Improper handling of untypical characters in domai...
EulerOS 2.0 SP9 : python-jinja2 (EulerOS-SA-2021-2538)
According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre regex operator an...
Inefficient Regular Expression Complexity in crankyoldgit/irremoteesp8266
✍️ Description The IRremoteESP8266 package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide crafted input to the extractsupports function in the file scrapesupporteddevices.py may cause an application to consume an excessive amount of CPU. Below...
CVE-2021-3807
A regular expression denial of service ReDoS vulnerability was found in nodejs-ansi-regex. This could possibly cause an application using ansi-regex to use an excessive amount of CPU time when matching crafted ANSI escape codes...
Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2021-2482)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : python-jinja2 (EulerOS-SA-2021-2482)
According to the versions of the python-jinja2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre regex operator a...
GHSA-X38Q-XG2H-RXGX Regular Expression Denial of Service in Leo Editor
Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...
Regular Expression Denial of Service in Leo Editor
Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...
Inefficient Regular Expression Complexity in trentm/python-markdown2
Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in markdown2. The ReDoS vulnerability is mainly due to the sub-pattern with quantified overlapping adjacency and can be exploited with the following code. Proof of Concept // PoC.py import markdown2 from...
Fix of CVE: CVE-2018-20852, CVE-2020-8492, CVE-2020-26116, CVE-2020-27619
Add Oracle Linux distribution in platform.py - CVE-2018-20852: Prefix dot in domain for proper subdomain validation - CVE-2020-8492: Python allows an HTTP server to conduct Regular Expression Denial of Service ReDoS attacks against a client - CVE-2020-26116: http.client allows CRLF injection if...
access-control (0.0.7), destiny-api (1.0.0) +11 more potentially affected by unknown CVE via millisecond (>=0.0.1, <=0.1.1)
millisecond NPM version =0.0.1, =0.11.0, =0.0.0, =0.0.1, =0.4.0, =0.0.1, =1.0.0, =1.0.4, =0.0.9, =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-M489-XR35-FJXR...
CVE-2020-23478
Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...
CVE-2020-23478
Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...
CVE-2020-23469
gmate v0.12+bionic contains a regular expression denial of service ReDoS vulnerability in the gedit3 plugin...
