vercel ms 安全漏洞

vercel ms is tiny millisecond conversion utility program. A security vulnerability exists in vercel ms versions prior to 2.0.0, which stems from a problem with the function parsing of the file index.js, where manipulation of the parameter str can lead to inefficient regular expression complexity...

Huawei EulerOS: Security Advisory for pcre2 (EulerOS-SA-2022-2868)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

email-existence 安全漏洞

email-existence is a library for checking the legitimacy of email messages. A security vulnerability exists in email-existence. An attacker exploited the vulnerability to cause an increase in the complexity of regular expressions...

EulerOS Virtualization 2.10.0 : pcre2 (EulerOS-SA-2022-2868)

According to the versions of the pcre2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the...

EulerOS Virtualization 2.10.1 : pcre2 (EulerOS-SA-2022-2886)

According to the versions of the pcre2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the...

PT-2022-7809 · Unknown · Markdown-It

Name of the Vulnerable Software and Affected Versions: markdown-it versions up to 2.x Description: A vulnerability was found in markdown-it, classified as problematic. It affects an unknown function of the file lib/common/html re.js, leading to inefficient regular expression complexity. Upgrading...

CVE-2020-26302

is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to...

Fedora 36 : golang (2022-0e313cc582)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-0e313cc582 advisory. This release includes security fixes to the archive/tar, net/http/httputil, and regexp packages, as well as bug fixes to the compiler, the linker, a...

CVE-2020-26302

is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to...

CVE-2020-26302

is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to...

Amazon Linux 2022 : golist (ALAS2022-2022-240)

The version of golist installed on the remote host is prior to 0.10.1-11. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-240 advisory. - Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read ...

EulerOS 2.0 SP8 : golang (EulerOS-SA-2022-2795)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amoun...

Vulnerability fixed in Exim

A vulnerability has been fixed in Exim. A malicious person at remote user could potentially exploit the vulnerability to cause a Denial-of-Service DoS attack. The way regular expressions are processed in configuration files processed can lead to a crash under certain circumstances. To do so, the...

USN-5741-1 exim4 vulnerability

It was discovered that Exim incorrectly handled certain regular expressions. An attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-5741-1: Exim vulnerability

It was discovered that Exim incorrectly handled certain regular expressions. An attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code...

Amazon Linux 2022 : pcre2, pcre2-devel, pcre2-static (ALAS2022-2022-191)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-191 advisory. An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the pcre2jitcompile.c file. This involves a unicode property matching issue ...

HTMLMinifier Denial of Service Vulnerability

HTMLMinifier is a Javascript-based HTML compressor/minifier . A denial of service vulnerability exists in HTMLMinifier version 4.0.0, which stems from the program's improper use of regular expressions, and can be exploited by an attacker to cause a denial of service by sending specially crafted...

HTMLMinifier 资源管理错误漏洞

HTMLMinifier is a Javascript-based HTML compressor/minifier . A denial of service vulnerability exists in HTMLMinifier version 4.0.0, which stems from the program's improper use of regular expressions, and can be exploited by an attacker to cause a denial of service by sending specially crafted...

Apache IoTDB 安全漏洞

Apache IoTDB is an integrated data management engine designed for time series data from the Apache Foundation USA that provides data collection, storage, and analysis services, among other things. A security vulnerability exists in Apache IoTDB versions 0.12.2 through 0.12.6, and 0.13.0 through...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.19 (SUSE-SU-2022:3669-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3669-1 advisory. Updated to version 1.19.2 bsc1200441: - CVE-2022-41715: Fixed memory exhaustion in regexp/syntax...