CVE-2021-40897

A Regular Expression Denial of Service ReDOS vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls...

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls...

CVE-2021-40897

CVE-2021-40897 affects split-html-to-chars v1.0.5. A Regular Expression Denial of Service (ReDOS) vulnerability arises from inefficient patterns in the Splitter when processing crafted invalid HTML, leading to potential denial of service. Public references describe the issue in index.js and relat...

CVE-2021-40897

A Regular Expression Denial of Service ReDOS vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls...

PT-2022-11325 · Unknown · Split-Html-To-Chars

Name of the Vulnerable Software and Affected Versions: split-html-to-chars version 1.0.5 Description: A Regular Expression Denial of Service ReDOS issue was found in the software when it processes crafted invalid HTML. This occurs due to inefficient regular expression patterns that can lead to...

Improper Verification of Cryptographic Signature

Overview jsrsasign is a free pure JavaScript cryptographic library. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or number escaped characters may be validated as valid ...

CLSA-2022-1653328424 Fixed CVEs in vim: CVE-2022-1616, CVE-2022-1621, CVE-2022-1620, CVE-2022-1629, CVE-2022-1619

CVE-2022-1619: fix going before the command line start with latin1 encoding - CVE-2022-1620: fix NULL pointer dereference when using invalig regexp - CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood - CVE-2022-1629: fix reading past end of line if ended with trailing backslash -...

CLSA-2022-1653006752 Fixed CVEs in vim: CVE-2022-1620, CVE-2022-1616, CVE-2022-1629, CVE-2022-1621, CVE-2022-1619

CVE-2022-1619: fix going before the command line start with latin1 encoding - CVE-2022-1620: fix NULL pointer dereference when using invalig regexp - CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood - CVE-2022-1629: fix reading past end of line if ended with trailing backslash -...

The vulnerability of the cmdline_erase_chars() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the cmdlineerasechars function in the Vim text editor is related to the issue of writing operations beyond the buffer’s boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially created...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Logging Security and Bug update Release 5.3.7

Openshift Logging Bug Fix Release 5.3.7 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

ALPINE-CVE-2022-1619

Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution...

DEBIAN-CVE-2022-1619

Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution...

AZL-9703 CVE-2022-1619 affecting package vim for versions less than 8.2.4925-1

Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution...

CVE-2022-1619

Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution...

UBUNTU-CVE-2022-1619

Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in Vim versions prior to 8.2, which stems from a heap-based buffer overflow in the cmdlineerasechars function...

Code injection

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars...

CVE-2020-27375

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars...

Important: Red Hat Security Advisory: screen security update

An update for screen is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

CVE-2021-43797

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It should instead fail fa...