5810 matches found
CVE-2019-9023
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in...
1tp (>=0.0.1, <=0.11.2), @chengkang/wildfire (>=0.0.1, <=0.0.4) +262 more potentially affected by CVE-2016-10536 via engine.io-client (>=1.6.4, <=1.6.8)
engine.io-client NPM version =1.6.4, =0.0.1, =0.0.1, =1.8.4, =1.0.0, =1.0.30, =0.1.0, =2.0.0-beta.1, =1.0.0, =0.0.1, =0.3.2, =0.3.0, =2.0.1, =1.7.0, =1.7.1 and more Source cves: CVE-2016-10536 Source advisory: OSV:GHSA-4R4M-HJWJ-43P8...
Sql injection
SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of service ReDoS, as demonstrated by crafted use of FILTER%20regex in a /individual?uri= request...
CVE-2019-6986
SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of service ReDoS, as demonstrated by crafted use of FILTER%20regex in a /individual?uri= request...
perl: Integer overflow leading to buffer overflow in Perl_my_setenv()
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...
[SECURITY] Fedora 28 Update: perl-Email-Address-1.912-1.fc28
This class implements a regex-based RFC 2822 parser that locates email addresses in strings and returns a list of Email::Address objects found. Alternatively you may construct objects manually. The goal of this software is to be correct, and very very fast...
Denial Of Service (DoS)
file is vulnerable to denial of service DoS attacks. The vulnerability exists as file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service CPU consumption via a crafted file that triggers backtracking duri...
Fedora 28 : php (2018-dfe1f0bac6)
PHP version 7.2.13 06 Dec 2018 ftp: - Fixed bug php77151 ftpclose: SSLread on shutdown. Remi CLI: - Fixed bug php77111 php-win.exe corrupts unicode symbols from cli parameters. Anatol Fileinfo: - Fixed bug php77095 slowness regression in 7.2/7.3 compared to 7.1. Anatol iconv: - Fixed bug php77147...
perl: Heap-based buffer overflow in S_handle_regex_sets()
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...
perl: Heap-based buffer read overflow in S_grok_bslash_N()
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...
perl: Integer overflow leading to buffer overflow in Perl_my_setenv()
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...
perl: Heap-based buffer overflow in S_handle_regex_sets()
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...
perl: Heap-based buffer read overflow in S_grok_bslash_N()
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...
SUSE SLED15 / SLES15 Security Update : perl (SUSE-SU-2018:4187-1)
This update for perl fixes the following issues : Secuirty issues fixed : CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. CVE-2018-18312: Fixed heap-buffer-overflow write / regnode overrun bsc1114675. CVE-2018-18313: Fixed heap-buffer-overflow read if regex contains \...
p5-Email-Address-List -- DDoS related vulnerability
Best PRactical Solutions reports: 0.06 2019-01-02 - Changes to address CVE-2018-18898 which could allow DDoS-type attacks. Thanks to Lukas Kramer for reporting the issue and Alex Vandiver for contributing fixes. - Fix pathological backtracking for unkown regex - Fix pathological backtracking in...
openSUSE Security Update : perl (openSUSE-2018-1595)
This update for perl fixes the following issues : Secuirty issues fixed : - CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. - CVE-2018-18312: Fixed heap-buffer-overflow write / regnode overrun bsc1114675. - CVE-2018-18313: Fixed heap-buffer-overflow read if regex...
Security update for perl (moderate)
This update for perl fixes the following issues: Secuirty issues fixed: - CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. - CVE-2018-18312: Fixed heap-buffer-overflow write / regnode overrun bsc1114675. - CVE-2018-18313: Fixed heap-buffer-overflow read if regex contai...
Open Redirect
symfony/symfony is vulnerable to open redirect attacks. The vulnerability exists due to the improper regex used to sanitize the request for a redirect, allowing bad redirects via backslashes, causing open redirect attacks...