104 matches found
FreeBSD : rubygem-uri -- ReDoS vulnerability (9b60bba1-cf18-11ed-bd44-080027f5fec9)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9b60bba1-cf18-11ed-bd44-080027f5fec9 advisory. - Dominic Couture reports: A ReDoS issue was discovered in the URI component. The URI parser mishandles...
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS such that the URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. Details Denial of Service DoS describ...
SUSE CVE-2007-0157
Array index error in the urilookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service crash via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error tha...
Ruby: URI parser's RFC3986 regular expression has poor performance when there are two # characters, leading to ReDoS
A vulnerability was found in the URI parser's RFC3986 regular expression. It has poor performance when parsing URLs with two characters, leading to denial of service through resource exhaustion...
UBUNTU-CVE-2021-46142
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax...
mod_auth_mellon: open redirect in logout url when using URLs with backslashes
A vulnerability was found in modauthmellon before v0.14.2. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the browsers silently convert backslash characters into forward slashes treating them as an absolute URL. Thi...
uriparser UriParse.c file out-of-bounds read vulnerability
uriparser is a standard based on RFC 3986 URI parsing and processing library . An out-of-bounds read vulnerability exists in the URIFUNC of the UriParse.c file in versions of uriparser prior to 0.9.1. No detailed vulnerability details are provided at this time...
Dell EMC iDRAC7 and iDRAC8 Path Traversal Vulnerability
Dell EMC iDRAC7 and iDRAC8 are both system management solutions containing hardware and software from Dell USA. The solutions provide remote management, crash recovery, and power control for Dell PowerEdge systems.Web server is one of the web servers.URI parser is one of the URI resolvers. A path...
CVE-2018-1211
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by...
CVE-2018-1211
CVE-2018-1211 affects Dell EMC iDRAC7/iDRAC8, prior to firmware 2.52.52.52. A path traversal flaw in the iDRAC Web server URI parser allows an unauthenticated remote attacker to read sensitive configuration data by querying crafted URI strings. Impact is partial confidentiality compromise; no int...
Design/Logic Flaw
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser...
CVE-2017-1000427
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser...
DEBIAN-CVE-2017-1000427
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser...
UBUNTU-CVE-2017-1000427
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser...
CVE-2017-1000427
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser...
CVE-2017-1000427
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser...
CVE-2007-0157
Array index error in the urilookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service crash via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error tha...
Mandriva Update for libneon0.26 MDKSA-2007:013 (libneon0.26)
Check for the Version of libneon0.26 OpenVAS Vulnerability Test Mandriva Update for libneon0.26 MDKSA-2007:013 libneon0.26 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandrake Linux Security Advisory : libneon0.26 (MDKSA-2007:013)
An array index error in the URI parser in neon 0.26.0 to 0.26.2 could possibly allow remote malicious servers to cause a crash via a URI with non-ASCII characters. This vulnerability may only exist on 64bit systems. Updated packages are patched to address this issue. %NASLMINLEVEL 70300 C Tenable...
[ MDKSA-2007:013 ] - Updated libneon0.26 packages fix vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:013 http://www.mandriva.com/security/ Package : libneon0.26 Date : January 12, 2007 Affected: 2007.0 Problem Description: An array index error in the URI parser in neon 0.26.0 to 0.26.2 could possibly allow...