Lucene search
K

31 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2011-3784

Malware in sbrugna...

4.3CVSS6.2AI score0.0365EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2025/04/11 9:55 a.m.1 views

SUSE CVE-2011-3827

The iCalendar component in gwwww1.dll in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted date-time string in a .ics attachment...

4.3CVSS6.7AI score0.0365EPSS
Exploits0References4
Broadcom
Broadcom
added 2023/11/07 12:0 a.m.6 views

The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code (CVE-2014-9471)

The parsedatetime function in GNU coreutils allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command...

7.5CVSS8AI score0.04258EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:0 a.m.38 views

Ubuntu 16.04 ESM : Moment.js vulnerabilities (USN-4786-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4786-1 advisory. It was discovered that Moment.js mishandled certain regular expressions. An attacker could use this vulnerability to cause a denial of service. Tenable h...

7.8CVSS6.5AI score0.02708EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:24 a.m.0 views

SUSE CVE-2014-9471

The parsedatetime function in GNU coreutils allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command...

7.5CVSS8AI score0.04258EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:35 a.m.1 views

SUSE CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS6AI score0.0023EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2023/01/31 1:18 p.m.3 views

nodejs-moment: Regular expression denial of service

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.8CVSS7.3AI score0.02708EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2023/01/31 1:15 p.m.3 views

nodejs-moment: Regular expression denial of service

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.8CVSS7.3AI score0.02708EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2023/01/31 1:15 p.m.3 views

nodejs-moment: Regular expression denial of service

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.8CVSS7.3AI score0.02708EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2023/01/31 1:12 p.m.3 views

nodejs-moment: Regular expression denial of service

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.8CVSS7.3AI score0.02708EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/10/11 7:30 a.m.1 views

ruby: Regular expression denial of service vulnerability of Date parsing methods

A flaw was found in ruby, where the date object was found to be vulnerable to a regular expression denial of service ReDoS during the parsing of dates. This flaw allows an attacker to hang a ruby application by providing a specially crafted date string. The highest threat to this vulnerability is...

7.5CVSS7.2AI score0.00495EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2022/02/21 9:4 a.m.2 views

ruby: Regular expression denial of service vulnerability of Date parsing methods

A flaw was found in ruby, where the date object was found to be vulnerable to a regular expression denial of service ReDoS during the parsing of dates. This flaw allows an attacker to hang a ruby application by providing a specially crafted date string. The highest threat to this vulnerability is...

7.5CVSS7.2AI score0.00495EPSS
Exploits1References5
OSV
OSV
added 2018/03/04 9:29 p.m.1 views

UBUNTU-CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS6.7AI score0.0023EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2018/03/04 9:29 p.m.41 views

CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS6.8AI score0.0023EPSS
Exploits0References6
OSV
OSV
added 2018/03/04 9:29 p.m.3 views

AZL-32178 CVE-2017-18214 affecting package reaper for versions less than 3.1.1-10

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS6.5AI score0.0023EPSS
Exploits0References1
OSV
OSV
added 2018/03/04 9:29 p.m.22 views

CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS6.7AI score
Exploits0References3
Debian CVE
Debian CVE
added 2018/03/04 9:0 p.m.27 views

CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS5.5AI score0.0023EPSS
Exploits0
Cvelist
Cvelist
added 2018/03/04 9:0 p.m.28 views

CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

6.6AI score0.0023EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2017/09/08 12:0 a.m.2 views

PT-2017-4100 · Moment.Js +2 · Moment +2

Name of the Vulnerable Software and Affected Versions: moment versions prior to 2.19.3 Description: The issue is related to a regular expression denial of service via a crafted date string. It allows a remote attacker to cause a denial of service. The vulnerability is associated with an...

7.8CVSS6.3AI score0.02708EPSS
Exploits1References27
OSV
OSV
added 2015/01/16 4:59 p.m.1 views

DEBIAN-CVE-2014-9471

The parsedatetime function in GNU coreutils allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command...

7.5CVSS7.2AI score0.04258EPSS
Exploits1References1
Rows per page
Query Builder