Lucene search
K

17 matches found

Broadcom
Broadcom
added 2023/11/07 12:0 a.m.6 views

The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code (CVE-2014-9471)

The parsedatetime function in GNU coreutils allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command...

7.5CVSS8AI score0.04258EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:0 a.m.38 views

Ubuntu 16.04 ESM : Moment.js vulnerabilities (USN-4786-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4786-1 advisory. It was discovered that Moment.js mishandled certain regular expressions. An attacker could use this vulnerability to cause a denial of service. Tenable h...

7.8CVSS6.5AI score0.02708EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:24 a.m.0 views

SUSE CVE-2014-9471

The parsedatetime function in GNU coreutils allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command...

7.5CVSS8AI score0.04258EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:35 a.m.1 views

SUSE CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS6AI score0.0023EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2023/01/31 1:15 p.m.3 views

nodejs-moment: Regular expression denial of service

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.8CVSS7.3AI score0.02708EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2023/01/31 1:15 p.m.3 views

nodejs-moment: Regular expression denial of service

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.8CVSS7.3AI score0.02708EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2018/03/04 9:29 p.m.41 views

CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS6.8AI score0.0023EPSS
Exploits0References6
OSV
OSV
added 2018/03/04 9:29 p.m.1 views

UBUNTU-CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS6.7AI score0.0023EPSS
Exploits0References7
OSV
OSV
added 2018/03/04 9:29 p.m.22 views

CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS6.7AI score
Exploits0References3
Debian CVE
Debian CVE
added 2018/03/04 9:0 p.m.26 views

CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

7.5CVSS5.5AI score0.0023EPSS
Exploits0
Cvelist
Cvelist
added 2018/03/04 9:0 p.m.28 views

CVE-2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055...

6.6AI score0.0023EPSS
Exploits0References3
NVD
NVD
added 2015/01/16 4:59 p.m.12 views

CVE-2014-9471

The parsedatetime function in GNU coreutils allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command...

7.5CVSS6.8AI score0.04258EPSS
Exploits1References10
Prion
Prion
added 2015/01/16 4:59 p.m.17 views

Command injection

The parsedatetime function in GNU coreutils allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command...

7.5CVSS8.3AI score0.04258EPSS
Exploits1References10Affected Software2
Cvelist
Cvelist
added 2015/01/16 4:0 p.m.28 views

CVE-2014-9471

The parsedatetime function in GNU coreutils allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command...

9.5AI score0.04258EPSS
Exploits1References10
OSV
OSV
added 2014/12/31 12:0 a.m.0 views

UBUNTU-CVE-2014-9471

The parsedatetime function in GNU coreutils allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command...

7.5CVSS6.8AI score0.04258EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2014/12/31 12:0 a.m.32 views

CVE-2014-9471

The parsedatetime function in GNU coreutils allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command...

7.5CVSS6.9AI score0.04258EPSS
Exploits1References5
Prion
Prion
added 2008/12/17 1:30 a.m.11 views

Memory corruption

The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a crafted date string, related to improper memory allocation...

10CVSS7.5AI score0.0089EPSS
Exploits0References8Affected Software2
Rows per page
Query Builder