2500 matches found
CVE-2016-10521
jshamcrest is vulnerable to regular expression denial of service ReDoS when certain types of user input is passed in to the emailAddress validator...
CVE-2016-10521
jshamcrest is vulnerable to regular expression denial of service ReDoS when certain types of user input is passed in to the emailAddress validator...
CVE-2016-10521
jshamcrest is vulnerable to regular expression denial of service ReDoS when certain types of user input is passed in to the emailAddress validator...
CVE-2016-10521
The CVE-2016-10521 issue affects the jshamcrest library, specifically the emailAddress validator. The underlying vulnerability is a regular expression denial of service (ReDoS) caused by certain user inputs, with PoC details showing heavy input can block the event loop. Documented impact indicate...
PT-2018-4701
Name of the Vulnerable Software and Affected Versions jshamcrest affected versions not specified Description The issue concerns a regular expression denial of service ReDoS vulnerability. It occurs when certain types of user input are passed to the emailAddress validator. This can cause a denial ...
CVE-2016-10521: Uncontrolled Resource Consumption
jshamcrest is vulnerable to regular expression denial of service ReDoS when certain types of user input is passed in to the emailAddress validator...
CVE-2018-11481
TP-LINK IPC TL-IPC223P-6, TL-IPC323K-D, TL-IPC325KP-, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters...
Malicious Package
Overview Version 1.0.2 of oauth-validator contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.2 of this module is found...
Cross-Site Scripting in @risingstack/protect
All versions of @risingstack/protect are vulnerable to Cross-Site Scripting. The isXss XSS validator has several bypasses that may allow attackers to execute arbitrary JavaScript in a victim's browser. Recommendation No fix is currently available. Consider using an alternative package. The packag...
GHSA-VPCH-RXW3-FGX8 Cross-Site Scripting in @risingstack/protect
All versions of @risingstack/protect are vulnerable to Cross-Site Scripting. The isXss XSS validator has several bypasses that may allow attackers to execute arbitrary JavaScript in a victim's browser. Recommendation No fix is currently available. Consider using an alternative package. The packag...
CVE-2018-10101
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...
CVE-2018-10101
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...
UBUNTU-CVE-2018-10101
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...
CVE-2018-10101
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...
CVE-2018-10101
CVE-2018-10101 affects WordPress up to version 4.9.4 where the URL validator incorrectly treated localhost hostnames as being on the same host as the WordPress server. This misclassification could enable a vulnerability scenario described across connected docs. Upgrading to WordPress 4.9.5 or lat...
CVE-2018-10101
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...
CVE-2018-10101: URL Redirection to Untrusted Site
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...
PT-2018-9682
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 4.9.5 debian linux affected versions not specified Description: The issue is related to the URL validator in WordPress, which incorrectly assumed that URLs with the hostname localhost were on the same host as the...
Micro Focus openSUSE obs-service-source_validator code execution vulnerability
Micro Focus openSUSE obs-service-sourcevalidator is a default source validator used by the Factory distribution from Micro Focus UK. A security vulnerability exists in Micro Focus openSUSE obs-service-sourcevalidator versions prior to 0.7. An attacker could exploit the vulnerability to execute co...