Lucene search
+L

177 matches found

RedhatCVE
RedhatCVE
•added 2020/09/16 9:00 p.m.•34 views

CVE-2020-7733

A flaw was found in nodejs-ua-parser-js. The software is vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS3.3AI score0.04483EPSS
SaveExploits1References4
NVD
NVD
•added 2020/09/16 2:15 p.m.•49 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS0.04483EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2020/09/16 2:15 p.m.•44 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS6.6AI score0.04483EPSS
SaveExploits1References5
osv_ubuntu
osv_ubuntu
•added 2020/09/16 2:15 p.m.•19 views

UBUNTU-CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS7.3AI score0.04483EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2020/09/16 2:15 p.m.•44 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS7.1AI score0.04483EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2020/09/16 2:10 p.m.•70 views

CVE-2020-7733 Regular Expression Denial of Service (ReDoS)

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS7.5AI score0.04483EPSS
SaveExploits1References5
CVE
CVE
•added 2020/09/16 2:10 p.m.•196 views

CVE-2020-7733

CVE-2020-7733 affects ua-parser-js prior to 0.7.22, where the Redmi/Mi UA regex can cause a Regular Expression Denial of Service (ReDoS). This may allow a crafted request to trigger a DoS on affected environments. Remediation: upgrade ua-parser-js to 0.7.22 or newer (as per description). If any d...

7.5CVSS7.5AI score0.04483EPSS
SaveExploits1References5Affected Software1
Mend
Mend
•added 2020/09/16 2:10 p.m.•5 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

8.7CVSS0.04483EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2020/09/16 2:10 p.m.•76 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS7.8AI score0.04483EPSS
SaveExploits1
attackerkb
attackerkb
•added 2020/09/16 2:05 p.m.•11 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS7.5AI score0.04483EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/16 12:00 a.m.•5 views

CVE-2020-7733: Uncontrolled Resource Consumption

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS5.8AI score0.04483EPSS
SaveExploits1References2
Snyk
Snyk
•added 2020/09/09 3:28 p.m.•14 views

Regular Expression Denial of Service (ReDoS)

Overview ua-parser-js is a lightweight JavaScript-based user-agent string parser. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA. POC by Yeting Li var blank = " "; for let i = 1; i 5000; i++ blank...

7.5CVSS9AI score0.04483EPSS
SaveExploits1References2
CNVD
CNVD
•added 2020/05/27 12:00 a.m.•15 views

Buffer Overflow Vulnerability in IPSec Component of Multiple Apple Products

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system for Mac computers.IPSec is one of the Internet protocol security components. one of the Internet Protocol security components. ...

7.5CVSS6.3AI score0.01375EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/04/08 12:00 a.m.•21 views

Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-34727)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An input validation error vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to create other user accounts in a tablet and access user data in extern...

7.1CVSS6.6AI score0.00137EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/08/20 12:00 a.m.•65 views

Debian DLA-1885-1 : linux-4.9 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2017-18509 Denis Andzakovic reported a missing type check in the IPv4 multicast routing implementation. A user with the CAPNETADMIN capability in a...

9.3CVSS7.1AI score0.05088EPSS
SaveExploits6References16
Tenable Nessus
Tenable Nessus
•added 2019/08/14 12:00 a.m.•74 views

Debian DLA-1884-1 : linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2017-18509 Denis Andzakovic reported a missing type check in the IPv4 multicast routing implementation. A user with the CAPNETADMIN capability in a...

9.3CVSS7.1AI score0.05088EPSS
SaveExploits6References11
Tenable Nessus
Tenable Nessus
•added 2019/08/14 12:00 a.m.•78 views

Debian DSA-4497-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2015-8553 Jan Beulich discovered that CVE-2015-2150 was not completely addressed. If a PCI physical function is passed through to a Xen guest, th...

9.3CVSS7AI score0.05088EPSS
SaveExploits7References37
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•56 views

Debian DSA-4495-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2018-20836 chenxiang reported a race condition in libsas, the kernel subsystem supporting Serial Attached SCSI SAS devices, which could lead to a...

9.3CVSS6.9AI score0.05088EPSS
SaveExploits9References27
ThreatPost
ThreatPost
•added 2019/02/08 3:31 p.m.•151 views

FireOS Flaw Allowed Limited Content Injection in Amazon Tablets

A vulnerability in the operating system of Amazon’s Fire Tablets could allow a hacker to inject malicious content into Settings, Legal and Compliance, Terms of Use and Privacy sections of the device. The bug could also allow an adversary to capture the serial number of the tablet. The Fire Tablet...

5.8CVSS7.4AI score0.00691EPSS
SaveExploits2References3
ThreatPost
ThreatPost
•added 2018/07/30 5:20 p.m.•16 views

Jailhouse Tablets Allow Inmates to Steal Thousands of Dollars in Credits

Officials at the Idaho Department of Correction say that inmates from five different facilities across the state collected nearly a quarter million dollars in credits after hacking their tablets. Up to 364 inmates exploited a vulnerability in JPay tablets – which were given to prisoners for email...

0.3AI score
SaveExploits0
Rows per page
Query Builder