CVE-2015-6736

The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression...

CVE-2015-6736

The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression...

CVE-2015-6736

The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression...

CVE-2015-6736

The CVE-2015-6736 entry concerns the MediaWiki Quiz extension, where remote attackers can trigger a denial-of-service through regex metacharacters in a regular expression. Affected component: Quiz extension for MediaWiki. Root cause: improper handling of regex metacharacters leading to DoS. Impac...

Flash - PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution

Flash - PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution Source: https://code.google.com/p/google-security-research/issues/detail?id=224&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id There’s an error in the PCRE engine version used in Flash that...

OpenAFS Denial of Service Vulnerability (CNVD-2015-05293)

OpenAFS is a distributed file system that allows sharing of archives and resources between systems over LANs and WANs. A security vulnerability exists in OpenAFS 1.6.12 and earlier versions of vlserver. A remote attacker can exploit this vulnerability to cause a denial of service out-of-bounds re...

The vulnerability of the Moodle learning management system allows a hacker to trigger a service failure.

The vulnerability of the filter/urltolink/filter.php sub-component of the Moodle learning management system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending requests containing specially crafted regular...

USN-2694-1 pcre3 vulnerabilities

Michele Spagnuolo discovered that PCRE incorrectly handled certain regular expressions. A remote attacker could use this issue to cause applications using PCRE to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. CVE-2014-8964...

Google Chrome V8 Denial of Service Vulnerability (CNVD-2015-04888)

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A security vulnerability exists in the regular-expression implementation of Google V8 used in versions of Google Chrome prior to 44.0.2403.89, which stems from ...

Stack overflow

The regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89, mishandles interrupts, which allows remote attackers to cause a denial of service application crash via crafted JavaScript code, as demonstrated by an error in garbage collection during allocation of...

rack-cors Gem Missing Anchor permits unauthorized CORS requests

Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net as well as...

unicode.org XSS vulnerability

Vulnerable URL: http://unicode.org/cldr/utility/regex.jsp?a=\pNd%2B%28%5B%5B%3AWB%3DMB%3A%5D%5B%3AWB%3DMN%3A%5D%5D\pNd%2B%29%3F%22%3E%3Csvg%2Fonload%3Dalert%28%2Fxssposed%2F%29%3E=The+35+quick+brown+fox+jumped+over+1.234+lazy+dogs%3A+1%3A234. Details: Description| Value ---|--- Patched:| No Lates...

CVE-2015-5144

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an 1 email message to the EmailValidator, a ...

SOL16831 - BSD regex library vulnerability CVE-2015-2305

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

UBUNTU-CVE-2015-5073

Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an...

PCRE 'compile_branch()' function heap buffer overflow vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. PCRE suffers from a heap buffer overflow vulnerability in compilebranch. This vulnerability allows an attacker to execute arbitrary code i...

SUSE SLES11 Security Update : php53 (SUSE-SU-2015:1018-1)

PHP 5.3 was updated to fix multiple security issues : bnc931776: pcntlexec does not check path validity CVE-2015-4026 bnc931772: overflow in ftpgenlist resulting in heap overflow CVE-2015-4022 bnc931769: memory corruption in pharparsetarfile when entry filename starts with NULL CVE-2015-4021...

PCRE 'compile_regex()' Buffer Overflow Vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A buffer overflow vulnerability exists in PCRE 'compileregex'. This allows attackers to exploit the vulnerability to execute arbitrary cod...

PCRE 'compile_regex()' function heap buffer overflow vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A heap buffer overflow vulnerability exists in the PCRE 'compileregex' function. This vulnerability could be exploited by an attacker to...

regex: heap overflow in regcomp() on 32-bit architectures

A heap buffer overflow flaw was found in the regcomp function of Henry Spencer's regular expression library. An attacker able to make an application process a specially crafted regular expression pattern with the regcomp function could cause that application to crash and possibly execute arbitrar...