901 matches found
njs:njs_process_script_fuzzer: Crash in njs_object_prop_alloc
Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5646684554788864 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e000000c80 Crash State:...
CVE-2020-23306
There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...
CVE-2020-23306
There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...
CVE-2020-23306
There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...
UBUNTU-CVE-2020-23306
There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...
Stack overflow
There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...
CVE-2020-23306
Removed by vendor...
CVE-2020-23306
There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...
JerryScript buffer error vulnerability
JerryScript is a lightweight JavaScript engine . A stack overflow vulnerability exists in ecmaregexpmatch in ecma-regexp-object.c:535 in JerryScript version 2.2.0. No detailed vulnerability details are provided at this time...
CVE-2020-23306: Out-of-bounds Write
There is a stack-overflow at ecma-regexp-object.c:535 in ecmaregexpmatch in JerryScript 2.2.0...
CVE-2021-23362
A regular expression denial of service vulnerability was found in hosted-git-info. If an application allows user input into the affected regular expression regexp function, shortcutMatch or fromUrl, then an attacker could craft a regexp which takes an ever increasing amount of time to process,...
CVE-2021-26813
markdown2 =1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time...
Design/Logic Flaw
CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin @ckeditor/ckeditor5-markdown-gfm before version 25.0.0 has a regex denial of service ReDoS vulnerability. The vulnerability allowed to abuse link recognition regular expression, whi...
CVE-2020-7760
This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/CodeMirror/blob/cdb228ac736369c685865b122b736cd0d397836c/mode/javascript/javascript.jsL129. The ReDOS...
Denial Of Service (DoS)
kibana is vulnerable to denial of service DoS. The vulnerability exists as the timelion labels could be used to cause slowdowns when parsed through the RegExp object...
INNEO Startup TOOLS 2018 M040 13.0.70.3804 - Remote Code Execution Exploit
Exploit for multiple platform in category web applications Exploit Title: INNEO Startup TOOLS 2018 M040 13.0.70.3804 - Remote Code Execution Exploit Author: Patrick Hener, SySS GmbH Many credits go to Dr. Benjamin Heß, SySS GmbH for helping with php oddities and the powershell payload Advisory:...
Denial of Service in gajus/url-regexp
Overview RegExp object to match and validate URLs. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. An attacker providing a long URL to validate or replace function will cause a Denial of Service attack. PoC node var regex = require"url-regexp";...
OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Scripting. Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
PT-2020-6408
Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to a stack-overflow in the ecma regexp match function at ecma-regexp-object.c:535. This vulnerability is associated with a buffer overflow record and can be exploited by a remote...