4273 matches found
Regular Expression Denial of Service in npm-user-validate
npm-user-validate before version 1.0.1 is vulnerable to a Regular Expression Denial of Service REDos. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters. Impact The issue affects the email function. If you use this function to...
diskmoe.com Cross Site Scripting vulnerability OBB-1414911
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-20372 · Google · Tink
Name of the Vulnerable Software and Affected Versions: Tink versions prior to 1.5 Description: A mis-handling of invalid unicode characters in the Java implementation of Tink allows an attacker to change the ID part of a ciphertext, resulting in the creation of a second ciphertext that can decryp...
USN-4581-1: Python vulnerability
It was discovered that Python incorrectly handled certain character sequences. A remote attacker could possibly use this issue to perform CRLF injection...
Fedora: Security Advisory for oniguruma (FEDORA-2020-d53469eceb)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for oniguruma (FEDORA-2020-952c499e9d)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 31 Update: oniguruma-6.9.4-2.fc31
Oniguruma is a regular expressions library. The characteristics of this library is that different character encoding for every regular expression object can be specified. supported APIs: GNU regex, POSIX and Oniguruma native...
[SECURITY] Fedora 32 Update: oniguruma-6.9.5-3.rev1.fc32
Oniguruma is a regular expressions library. The characteristics of this library is that different character encoding for every regular expression object can be specified. supported APIs: GNU regex, POSIX and Oniguruma native...
The vulnerability of the software for working with animations in Adobe Character Animator lies in errors during the path validation of dynamically loaded libraries, allowing attackers to execute arbitrary code.
The vulnerability of the software for working with animations in Adobe Character Animator is related to errors in checking the path of dynamically loaded libraries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
[SECURITY] Fedora 33 Update: oniguruma-6.9.5-3.rev1.fc33
Oniguruma is a regular expressions library. The characteristics of this library is that different character encoding for every regular expression object can be specified. supported APIs: GNU regex, POSIX and Oniguruma native...
USN-4570-1: urllib3 vulnerability
It was discovered that urllib3 incorrectly handled certain character sequences. A remote attacker could possibly use this issue to perform CRLF injection...
CVE-2020-13325
A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting the characters properly, potentially resulting in a denial of service...
kernel: race condition caused by a malicious USB device in the USB character device driver layer
A flaw was found in the Linux kernel, where there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer. An attacker who can hotplug at least two devices of this class can cause a use-after-free situation...
kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open
There is a use-after-free problem seen due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this time if the underlying device is removed, it ca...
samba: Crash after failed character conversion at log level 3 or above
A flaw was found in samba. When log levels are set at 3 or higher, the string obtained from the client, after a failed character conversion, is printed which could cause long-lived processes to terminate. The highest threat from this vulnerability is to system availability...
kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open
There is a use-after-free problem seen due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this time if the underlying device is removed, it ca...
RHEL 7 : samba (RHSA-2020:3981)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3981 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...
EulerOS 2.0 SP3 : samba (EulerOS-SA-2020-2110)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.4.23 cluster-network-operator-container security update
An update for cluster-network-operator-container is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
