Lucene search
+L

6859 matches found

Tenable Nessus
Tenable Nessus
added 2019/07/22 12:00 a.m.22 views

EulerOS 2.0 SP2 : perl (EulerOS-SA-2019-1717)

According to the version of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write...

9.8CVSS8.3AI score0.11676EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2019/07/19 4:13 p.m.89 views

Regular Expression Denial of Service (ReDoS) in lodash

lodash prior to 4.7.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS5.3AI score0.03076EPSS
SaveExploits1References9Affected Software4
OSV
OSV
added 2019/07/19 4:13 p.m.9 views

GHSA-X5RQ-J2XG-H7QM Regular Expression Denial of Service (ReDoS) in lodash

lodash prior to 4.7.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6.8AI score0.03076EPSS
SaveExploits1References9
RubySec
RubySec
added 2019/07/19 12:00 a.m.12 views

Regular Expression Denial of Service (ReDoS) in lodash

lodash prior to 4.7.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS7AI score0.03076EPSS
SaveExploits1References1Affected Software1
Fedora
Fedora
added 2019/07/18 8:32 p.m.21 views

[SECURITY] Fedora 29 Update: mutt-1.12.0-1.fc29

Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...

1AI score
SaveExploits0
OSV
OSV
added 2019/07/17 9:15 p.m.2 views

DEBIAN-CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6.2AI score0.03076EPSS
SaveExploits1References1
OSV
OSV
added 2019/07/17 9:15 p.m.29 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6.4AI score
SaveExploits0References4
NVD
NVD
added 2019/07/17 9:15 p.m.22 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS7.5AI score0.03076EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2019/07/17 9:15 p.m.33 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6.8AI score0.03076EPSS
SaveExploits1References3
Prion
Prion
added 2019/07/17 9:15 p.m.30 views

Denial of service

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

4CVSS7.5AI score0.03076EPSS
SaveExploits1References4Affected Software1
nodejs
nodejs
added 2019/07/17 8:26 p.m.17 views

Regular Expression Denial of Service

Overview Affected versions of marked are vulnerable to Regular Expression Denial of Service ReDoS. The label subrule may significantly degrade parsing performance of malformed input. Recommendation Upgrade to version 0.7.0 or later. References GitHub Advisory...

6.9AI score
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2019/07/17 8:25 p.m.31 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

7.5AI score0.03076EPSS
SaveExploits1References4
CVE
CVE
added 2019/07/17 8:25 p.m.177 views

CVE-2019-1010266

CVE-2019-1010266 is a lodash vulnerability affecting versions before 4.17.11, caused by Uncontrolled Resource Consumption (ReDoS) in the Date handling code. The attack relies on the library matching very long strings with a regular expression, leading to a Denial of Service. The fix is to upgrade...

6.5CVSS6.4AI score0.03076EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2019/07/11 6:51 a.m.34 views

CVE-2019-13225

A NULL Pointer Dereference in matchat in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust...

6.5CVSS5.7AI score0.02129EPSS
SaveExploits0References3
NVD
NVD
added 2019/07/10 2:15 p.m.24 views

CVE-2019-13225

A NULL Pointer Dereference in matchat in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust...

6.5CVSS7.6AI score0.02129EPSS
SaveExploits0References4
OSV
OSV
added 2019/07/10 2:15 p.m.23 views

CVE-2019-13225

A NULL Pointer Dereference in matchat in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust...

6.5CVSS6.6AI score
SaveExploits0References4
Prion
Prion
added 2019/07/10 2:15 p.m.27 views

Null pointer dereference

A NULL Pointer Dereference in matchat in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust...

4.3CVSS7.5AI score0.02129EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
added 2019/07/10 1:50 p.m.23 views

CVE-2019-13225

A NULL Pointer Dereference in matchat in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust...

7.7AI score0.02129EPSS
SaveExploits0References4
CVE
CVE
added 2019/07/10 1:50 p.m.226 views

CVE-2019-13225

Oniguruma 6.9.2 contains a NULL pointer dereference in match_at() (CVE-2019-13225) that can lead to denial of service when a crafted regular expression is used. Multiple connected advisories (AlmaLinux, Fedora, Amazon Linux, Astra Linux) report the vulnerability and list updates/patches for onigu...

6.5CVSS7.5AI score0.02129EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2019/07/10 1:50 p.m.38 views

CVE-2019-13225

A NULL Pointer Dereference in matchat in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust...

6.5CVSS6.2AI score0.02129EPSS
SaveExploits0
Rows per page
Query Builder