Lucene search
+L

6721 matches found

wpexploit
wpexploit
added 2022/01/10 12:00 a.m.113 views

Store Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the tab parameter before outputting it back in an admin page in an error message, leading to a Reflected Cross-Site Scripting https://example.com/wp-admin/admin.php?page=woost&tab=%3Cimg+src+onerror%3Dalert%281%29%3E...

6.1CVSS1AI score0.00876EPSS
SaveExploits2References1
OSV
OSV
added 2022/01/06 10:24 p.m.6 views

GHSA-RQJH-JP2R-59CJ NLTK Vulnerable to REDoS

NLTK is vulnerable to REDoS in some RegexpTaggers used in the functions getpostagger and maltregextagger...

8.7CVSS7.1AI score0.01461EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2022/01/04 3:15 p.m.7 views

CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.1AI score0.01461EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/04 3:15 p.m.8 views

PYSEC-2022-5

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.1AI score0.01461EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/04 3:15 p.m.6 views

UBUNTU-CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.1AI score0.01461EPSS
SaveExploits1References7
PyPA
PyPA
added 2022/01/04 3:15 p.m.7 views

PYSEC-2022-5

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7AI score0.01461EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2022/01/04 12:00 a.m.8 views

nltk 安全漏洞

Nltk is a natural language toolkit. It is used to support research and development in natural language processing. A security vulnerability exists in nltk that stems from an exception being triggered during the processing of regular expressions...

7.5CVSS7.2AI score0.01461EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/12/30 12:00 a.m.63 views

Debian DLA-2866-1 : uw-imap - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2866 advisory. - University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of the imaprimap function in...

8.5CVSS7.8AI score0.9523EPSS
SaveExploits5References6
Fedora
Fedora
added 2021/12/28 1:07 a.m.52 views

[SECURITY] Fedora 34 Update: mutter-40.7-1.fc34

Mutter is a window and compositing manager that displays and manages your desktop via OpenGL. Mutter combines a sophisticated display engine using the Clutter toolkit with solid window-management logic inherited from the Metacity window manager. While Mutter can be used stand-alone, it is primari...

5.5CVSS2.3AI score0.00285EPSS
SaveExploits0
CNVD
CNVD
added 2021/12/27 12:00 a.m.65 views

Natural Language Toolkit Resource Management Error Vulnerability

Natural Language Toolkit NLTK is a natural language processing toolkit written in Python.Natural Language Toolkit NLTK versions prior to 3.6.5 are vulnerable to resource management errors, which can be exploited by attackers to conduct denial of service attacks...

7.5CVSS4.1AI score0.02668EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/23 6:15 p.m.13 views

DEBIAN-CVE-2021-43854

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...

7.5CVSS7.5AI score0.02668EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/23 6:15 p.m.12 views

UBUNTU-CVE-2021-43854

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...

7.5CVSS7.2AI score0.02668EPSS
SaveExploits1References8
PyPA
PyPA
added 2021/12/23 6:15 p.m.6 views

PYSEC-2021-859

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...

7.5CVSS6.9AI score0.02668EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/12/23 6:15 p.m.9 views

PYSEC-2021-859

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...

7.5CVSS6.1AI score0.02668EPSS
SaveExploits1References4
CVE
CVE
added 2021/12/23 5:55 p.m.103 views

CVE-2021-43854

CVE-2021-43854 affects the Python package NLTK. Versions prior to 3.6.5 are vulnerable to a Regular Expression Denial of Service (ReDoS) in the affected tokenizers: PunktSentenceTokenizer, sent_tokenize, and word_tokenize. The issue arises from inefficient regex backtracking on crafted inputs, ca...

7.5CVSS7.4AI score0.02668EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2021/12/23 12:00 a.m.11 views

Natural Language Toolkit 资源管理错误漏洞

Natural Language Toolkit NLTK is a natural language processing toolkit written in Python.Natural Language Toolkit NLTK versions prior to 3.6.5 are vulnerable to resource management errors, which can be exploited by attackers to conduct denial of service attacks...

7.5CVSS5.5AI score0.02668EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/12/21 12:00 a.m.9 views

Open Design Alliance (ODA) Drawings Explorer 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for the . The...

7.8CVSS6.1AI score0.00814EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:00 a.m.11 views

The vulnerability of the JT Utilities and JT Open Toolkit (JTTK) application development tools, related to data writing beyond the buffer limit, allows a perpetrator to execute arbitrary code.

The vulnerability of the JT Utilities and JT Open Toolkit JTTK application development tools is related to data writing outside of the buffer during JT file syntax analysis. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00814EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:00 a.m.9 views

The vulnerability of the JT Utilities and JT Open Toolkit (JTTK) application development tools, related to buffer overflow in the stack, allows an attacker to execute arbitrary code.

The vulnerability of the JT Utilities and JT Open Toolkit JTTK application development tools is related to buffer overflows in the stack during syntax analysis of JT files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00869EPSS
SaveExploits0References3Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/12/17 1:15 p.m.5 views

CVE-2021-43678

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

6.1CVSS6.4AI score0.00775EPSS
SaveExploits1References3
Rows per page
Query Builder