Lucene search
+L

1885 matches found

Cvelist
Cvelist
added 2022/06/27 11:38 a.m.26 views

CVE-2021-40901

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails...

7.7AI score0.01002EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/27 12:0 a.m.7 views

that-value 安全漏洞

that-value is a multilingual platform validator package by the individual developer Paweł Stefański, Poland. A Regular Expression Denial of Service ReDOS vulnerability exists in that-value version v0.1.3, which can be exploited by an attacker to cause a denial of service when validating a crafted...

7.5CVSS5.7AI score0.01002EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/06/27 12:0 a.m.9 views

PT-2022-11329 · Unknown · Scniro-Validator

Name of the Vulnerable Software and Affected Versions: scniro-validator version 1.0.1 Description: A Regular Expression Denial of Service ReDOS issue was found in the validation of crafted invalid emails. Recommendations: For scniro-validator version 1.0.1, consider updating to a newer version th...

7.5CVSS7.3AI score0.01002EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/27 12:0 a.m.7 views

scniro-validator 安全漏洞

scniro-validator is a small, dependency-free email validator. scniro-validator version v1.0.1 contains a denial of service vulnerability that stems from a failure to properly handle crafted invalid emails when validating them, which could be exploited by an attacker to cause a denial of service o...

7.5CVSS5.6AI score0.01002EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:17 p.m.5 views

Malicious code in skip-reason-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a30343b31f58eb174f1fed869a1b744f9f733741eb22676357e09395c169212 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:17 p.m.8 views

MAL-2022-6150 Malicious code in skip-reason-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a30343b31f58eb174f1fed869a1b744f9f733741eb22676357e09395c169212 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.7 views

Malicious code in stylelint-bem-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8b27f9be233ba1e0a20cd29efbd9d6a2b5982651dee648523dd66d48ee7ea09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.12 views

MAL-2022-6339 Malicious code in stylelint-bem-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8b27f9be233ba1e0a20cd29efbd9d6a2b5982651dee648523dd66d48ee7ea09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/17 12:1 a.m.38 views

GHSA-RC57-9R3X-98CQ XML External Entity Reference in drools

drools =7.59.x is affected by an XML External Entity XXE vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability...

9.8CVSS9.5AI score0.01219EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/06/17 12:1 a.m.58 views

XML External Entity Reference in drools

drools =7.59.x is affected by an XML External Entity XXE vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability...

9.8CVSS2.4AI score0.01219EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/06/16 10:15 a.m.29 views

CVE-2021-41411

drools =7.59.x is affected by an XML External Entity XXE vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability...

9.8CVSS0.01219EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/16 10:15 a.m.8 views

CVE-2021-41411

drools =7.59.x is affected by an XML External Entity XXE vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability...

9.8CVSS7.3AI score0.01219EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/16 10:15 a.m.28 views

CVE-2021-41411

drools =7.59.x is affected by an XML External Entity XXE vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability...

9.8CVSS9.6AI score
SaveExploits0References1
CNNVD
CNNVD
added 2022/06/16 12:0 a.m.9 views

drools 代码问题漏洞

drools is KIE open source a business rules management system . Open source rules engine, DMN engine and Complex Event Processing CEP engine for Java and JVM platforms. A security vulnerability exists in drools 7.59.x and earlier versions , the vulnerability stems from the Validator class in...

9.8CVSS7.7AI score0.01219EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/07 12:0 a.m.5 views

grub2 数据伪造问题漏洞

grub2 is a Linux system boot program from the US GNU community. A data forgery issue vulnerability exists in grub2 that stems from the shimlock validator allowing non-kernel files to be loaded...

7.8CVSS6.9AI score0.00316EPSS
SaveExploits0References18
OSV
OSV
added 2022/05/24 4:46 p.m.10 views

GHSA-Q87V-Q8FW-GMJ5 Symfony Incorrect Access Control

Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator...

9.8CVSS9.4AI score0.01855EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2022/05/24 4:46 p.m.33 views

Symfony Incorrect Access Control

Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator...

9.8CVSS6.9AI score0.01855EPSS
SaveExploits0References9Affected Software3
RedhatCVE
RedhatCVE
added 2022/05/20 11:14 p.m.34 views

CVE-2018-3776

Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log...

5.3CVSS3.5AI score0.01263EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2022/05/17 2:41 a.m.42 views

Zend Framework CSRF Vulnerability

Cross-site request forgery CSRF vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers...

8.8CVSS7AI score0.00656EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2022/05/17 12:48 a.m.11 views

GHSA-CQF7-FF9H-7967 Django ReDoS in validators.URLValidator

validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

8.7CVSS6.8AI score0.03EPSS
SaveExploits0References9
Rows per page
Query Builder