Lucene search
+L

1896 matches found

OSV
OSV
•added 2025/03/27 5:15 p.m.•4 views

DEBIAN-CVE-2023-52928

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip invalid kfunc call in backtrackinsn The verifier skips invalid kfunc call in checkkfunccall, which would be captured in fixupkfunccall if such insn is not eliminated by dead code elimination. However, this can lead to t...

5.5CVSS5.3AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/27 5:15 p.m.•14 views

UBUNTU-CVE-2023-52928

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip invalid kfunc call in backtrackinsn The verifier skips invalid kfunc call in checkkfunccall, which would be captured in fixupkfunccall if such insn is not eliminated by dead code elimination. However, this can lead to t...

5.5CVSS5.9AI score0.00245EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/03/27 4:37 p.m.•20 views

CVE-2023-52928 bpf: Skip invalid kfunc call in backtrack_insn

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip invalid kfunc call in backtrackinsn The verifier skips invalid kfunc call in checkkfunccall, which would be captured in fixupkfunccall if such insn is not eliminated by dead code elimination. However, this can lead to t...

0.00245EPSS
SaveExploits0References3
OSV
OSV
•added 2025/03/27 4:37 p.m.•14 views

CVE-2023-52928 bpf: Skip invalid kfunc call in backtrack_insn

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip invalid kfunc call in backtrackinsn The verifier skips invalid kfunc call in checkkfunccall, which would be captured in fixupkfunccall if such insn is not eliminated by dead code elimination. However, this can lead to t...

6AI score
SaveExploits0References6
CVE
CVE
•added 2025/03/27 4:37 p.m.•117 views

CVE-2023-52928

CVE-2023-52928 concerns the Linux kernel’s BPF verifier. According to connected sources, the issue arises from the verifier’s handling of invalid kfunc calls in backtrack_insn, where such an instruction could be captured by fixup_kfunc_call() and, if not eliminated by DCE, trigger a warning in ba...

5.5CVSS5.9AI score0.00245EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2025/03/26 2:08 p.m.•30 views

@mozilla/readability Denial of Service through Regex

Specially crafted titles may have caused a regular expression to excessively backtrack and cause a local denial of service. Additional Details are available at Bugzilla Credit: DayShift...

6.8AI score0.00623EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•3 views

PT-2025-13022

Specially crafted titles may have caused a regular expression to excessively backtrack and cause a local denial of service. Additional Details are available at Bugzilla Credit: DayShift...

6.3CVSS0.00623EPSS
SaveExploits0References5
Ubuntu
Ubuntu
•added 2025/03/24 1:55 a.m.•14 views

USN-7365-1: NLTK vulnerabilities

It was discovered that NLTK contained a regex that is susceptible to catastrophic backtracking. An attacker could possibly use this issue to cause a denial of service. CVE-2021-3842, CVE-2021-43854...

7.5CVSS7.2AI score0.02595EPSS
SaveExploits2
OSV
OSV
•added 2025/03/24 1:55 a.m.•12 views

USN-7365-1 nltk vulnerabilities

It was discovered that NLTK contained a regex that is susceptible to catastrophic backtracking. An attacker could possibly use this issue to cause a denial of service. CVE-2021-3842, CVE-2021-43854...

7.5CVSS5.8AI score0.02595EPSS
SaveExploits2References3
OpenVAS
OpenVAS
•added 2025/03/24 12:00 a.m.•20 views

Ubuntu: Security Advisory (USN-7365-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.02595EPSS
SaveExploits2References2
OSV
OSV
•added 2025/03/17 9:30 p.m.•74 views

GHSA-3RW8-4XRQ-3F7P Duplicate Advisory: Uptime Kuma ReDoS vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hx7h-9vf7-5xhg. This link is maintained to preserve external references. Original Description Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through th...

6.9CVSS6.1AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/03/17 12:00 a.m.•6 views

CVE-2025-26042

Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...

6.4AI score0.00389EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•6 views

CVE-2025-26042: Inefficient Regular Expression Complexity

Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...

6CVSS5.8AI score0.00389EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/17 12:00 a.m.•30 views

CVE-2025-26042

Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...

0.00389EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/17 12:00 a.m.•119 views

CVE-2025-26042

Uptime Kuma versions >== 1.23.0 are vulnerable to a Regular Expression Denial of Service (ReDoS) via catastrophic backtracking. The issue occurs when an administrator creates a notification through the web service, specifically within the pushdeer.js and whapi.js notification providers. The vu...

6CVSS6.5AI score0.00389EPSS
SaveExploits0References3
OSV
OSV
•added 2025/03/17 12:00 a.m.•15 views

CVE-2025-26042

Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...

6CVSS5.9AI score
SaveExploits0References5
Huntr
Huntr
•added 2025/03/07 7:49 p.m.•21 views

Regular expression Denial of Service - ReDoS

Description The regex defined in the variable SETTINGRE contains repetition groups and non-optimized quantifiers, which can lead to exponential backtracking when receiving "almost matching" payloads. This may degrade the application's performance or even cause a denial-of-service DoS when...

7.5CVSS7.2AI score0.00494EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/05 4:17 p.m.•20 views

Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to backtracking (CVE-2024-52798)

Summary There is a vulnerability in path-to-regexp used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-52798 DESCRIPTION: path-to-regexp turns path strings into a...

8.7CVSS6.8AI score0.00787EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2019-14232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If django.utils.text.Truncator's chars and words methods...

7.5CVSS6.7AI score0.03531EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2025/02/26 6:38 p.m.•10 views

Security update for ruby2.5

This update for ruby2.5 fixes the following issues: CVE-2024-47220: Fixed a HTTP request smuggling attack in WEBrick bsc1230930 CVE-2024-49761: Fixed a ReDoS vulnerability in ruby rexml bsc1232440 Other fixes: ruby/uri Fix quadratic backtracking on invalid relative URI ruby/time Make RFC2822 rege...

8.3CVSS7.4AI score0.0142EPSS
SaveExploits0References8
Rows per page
Query Builder