Lucene search
+L

67 matches found

RedHat Linux
RedHat Linux
•added 2019/05/22 12:03 p.m.•11 views

python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib

A flaw was found in the way catastrophic backtracking was implemented in python's pop3lib's apop method. An attacker could use this flaw to cause denial of service...

7.5CVSS7.1AI score0.05039EPSS
SaveExploits1References5
Prion
Prion
•added 2017/09/06 9:29 p.m.•18 views

Design/Logic Flaw

The URI.decodewwwformcomponent method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service catastrophic regular expression backtracking, resource consumption, or application crash via a crafted string...

5CVSS7.1AI score0.04128EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2017/01/23 9:59 p.m.•5 views

DEBIAN-CVE-2015-8854

The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service CPU consumption via unspecified vectors that trigger a "catastrophic backtracking issue for the em inline rule," aka a "regular expression denial of service ReDoS."...

7.5CVSS6.8AI score0.04334EPSS
SaveExploits0References1
OSV
OSV
•added 2016/12/15 6:59 a.m.•6 views

CVE-2016-7869

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to backtrack search functionality. Successful exploitation could lead to arbitrary code execution...

8.8CVSS6.3AI score0.11071EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2015/01/22 12:00 a.m.•6 views

PT-2015-3416 · Marked · Marked

Name of the Vulnerable Software and Affected Versions: marked versions 0.3.3 and earlier Description: The issue is related to errors in resource management, allowing a remote attacker to cause a denial of service. This can be achieved through unspecified vectors that trigger a "catastrophic...

7.8CVSS6.2AI score0.04334EPSS
SaveExploits0References27
OSV
OSV
•added 2014/09/26 3:55 p.m.•14 views

MGASA-2014-0389 Updated perl-Email-Address packages fix security vulnerabilities

Updated perl-Email-Address package fixes security vulnerability: The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...

5CVSS6.3AI score0.03584EPSS
SaveExploits2References3
OSV
OSV
•added 2014/07/06 11:55 p.m.•15 views

CVE-2014-4720

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477...

6.3AI score
SaveExploits0References2
Rows per page
Query Builder