Lucene search
+L

890 matches found

osv_debian
osv_debian
•added 2022/05/18 11:15 a.m.•11 views

DEBIAN-CVE-2022-30974

compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413...

5.5CVSS6.4AI score0.01151EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/05/18 11:15 a.m.•25 views

UBUNTU-CVE-2022-30974

compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413...

5.5CVSS6.8AI score0.01151EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/05/18 12:00 a.m.•19 views

Artifex Software Artifex MuJS 安全漏洞

Artifex Software Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software, Inc. that is used to embed into other software to provide script execution functionality.Artifex Software Artifex MuJS version 1.2.0 and earlier versions are vulnerable to denial of service vulnerability,...

5.5CVSS5.7AI score0.01151EPSS
SaveExploits1References7
Rockylinux
Rockylinux
•added 2022/05/17 7:32 a.m.•23 views

new packages: regexp

An update is available for regexp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

2AI score
SaveExploits0
Redos
Redos
•added 2022/05/16 12:00 a.m.•75 views

ROS-20220516-06

A vulnerability in the high-level Ruby programming language is related to a type conversion bug in the some conversion methods, such as KernelFloat and Stringtof. Exploitation of the vulnerability could allow an attacker acting remotely to pass specially crafted data to a vulnerable application,...

9.8CVSS7.3AI score0.0437EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/05/13 12:00 a.m.•15 views

PCRE 缓冲区错误漏洞

PCRE is an open source regular expression library written in C by the individual developer Philip Hazel. A security vulnerability exists in PCRE. An attacker can exploit this vulnerability to trigger a denial of service or obtain sensitive information by forcing a read of an invalid memory addres...

9.1CVSS7.2AI score0.03366EPSS
SaveExploits0References50
osv_azl
osv_azl
•added 2022/05/12 11:15 a.m.•27 views

AZL-9749 CVE-2022-1674 affecting package vim for versions less than 8.2.5064-1

NULL Pointer Dereference in function vimregexecstring at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vimregexecstring at regexp.c:2733 allows attackers to cause a denial of service application crash via a crafted input...

5.5CVSS6.7AI score0.01546EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/05/12 11:15 a.m.•7 views

UBUNTU-CVE-2022-1674

NULL Pointer Dereference in function vimregexecstring at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vimregexecstring at regexp.c:2733 allows attackers to cause a denial of service application crash via a crafted input...

6.6CVSS6.8AI score0.01546EPSS
SaveExploits1References7
NVD
NVD
•added 2022/05/09 6:15 p.m.•28 views

CVE-2022-28738

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations...

9.8CVSS0.02974EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2022/05/09 6:15 p.m.•15 views

CVE-2022-28738

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations...

9.8CVSS6.7AI score0.02974EPSS
SaveExploits0References6
osv_alpine
osv_alpine
•added 2022/05/09 6:15 p.m.•6 views

ALPINE-CVE-2022-28738

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations...

9.8CVSS6.8AI score0.02974EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2022/05/09 6:15 p.m.•39 views

CVE-2022-28738

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations...

9.8CVSS6.7AI score0.02974EPSS
SaveExploits0References6
Prion
Prion
•added 2022/05/09 6:15 p.m.•37 views

Double free

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations...

7.5CVSS9.1AI score0.02974EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2022/05/09 12:00 a.m.•291 views

CVE-2022-28738

Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2 contains a double-free in the Regexp compiler when compiling a Regexp from untrusted user input, potentially allowing memory corruption. The issue is fixed in Ruby 3.0.4 and 3.1.2+; affected releases include Ruby 3.x up to those pre-fix versions. Sever...

9.8CVSS9.1AI score0.02974EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2022/05/09 12:00 a.m.•4 views

CVE-2022-28738

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations...

9.8CVSS0.02974EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/09 12:00 a.m.•8 views

CVE-2022-28738: Double Free

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations...

9.8CVSS7.4AI score0.02974EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/05/09 12:00 a.m.•89 views

CVE-2022-28738

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations...

2.8AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2022/05/09 12:00 a.m.•32 views

CVE-2022-28738

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations...

9.5AI score0.02974EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2022/05/09 12:00 a.m.•35 views

CVE-2022-28738

Removed by vendor...

9.8CVSS7.2AI score0.02974EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2022/05/08 11:15 a.m.•8 views

UBUNTU-CVE-2022-1620

NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 allows attackers to cause a denial of service application crash via a crafted input...

7.5CVSS6.9AI score0.01593EPSS
SaveExploits1References7
Rows per page
Query Builder