72 matches found
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
A exposure of sensitive information vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Plugin.java that allows attackers to determine the date and time when a plugin HPI/JPI file was last extracted, which typically is the date of the most recent installation/upgrade...
Mageia: Security Advisory (MGASA-2014-0445)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Regular Expression Denial of Service
Overview date-and-time is a package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. Recommendation Upgrade to version version 0.14.2 or later. References - GitHub Advisor...
CVE-2020-26289
A flaw was found in nodejs-date-and-time. In date-and-time there a regular expression involved in parsing which can be exploited to cause a denial of service...
date-and-time denial-of-service vulnerability
Date And Time is Date And Time personal developer of a Javascript-based for processing JS date and time Npm code library . A security vulnerability exists in versions prior to date-and-time 0.14.2, which stems from regular expression exception handling involving parsing, resulting in a...
CVE-2020-26289
date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2...
CVE-2020-26289
date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2...
Design/Logic Flaw
date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2...
CVE-2020-26289 Regular expression Denial of Service in date-and-time
date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2...
CVE-2020-26289
CVE-2020-26289 affects the npm package date-and-time. A regular-expression based parsing flaw (ReDoS) in versions before 0.14.2 can be exploited to cause a denial of service. The issue is fixed in version 0.14.2. The vulnerability details are supported by multiple sources in connected documents, ...
Date And Time 资源管理错误漏洞
Date And Time is Date And Time personal developer of a Javascript-based for processing JS date and time Npm code library . A security vulnerability exists in versions prior to date-and-time 0.14.2, which stems from regular expression exception handling involving parsing, resulting in a...
@3wks/gae-node-nestjs (>=2.1.1, <=6.0.0-rc.0), @8sistemas/design-system (>=0.6.0-alpha.1, <=1.0.5) +892 more potentially affected by CVE-2020-26289 via date-and-time (>=0.3.0, <=0.14.1)
date-and-time NPM version =0.3.0, =2.1.1, =0.6.0-alpha.1, =0.0.38, =1.1.8, =4.2.0, =0.0.6, =3.6.0, =1.0.0, =0.0.0, =1.1.68, =1.4.3, =0.1.3, =0.1.0-master.20191004191703, =1.4.1-atomist.a260p86nh.typescript-version.master.20190915212851, =2.0.0-master.20200715122321 and more Source cves:...
regular expression denial of service (ReDoS)
date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2...
GHSA-R92X-F52R-X54G regular expression denial of service (ReDoS)
date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2...
Description of the security update for SharePoint Server 2019: April 14, 2020
None None...
CVE-2013-3516
NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens...
April 25, 2019—KB4493460 (Preview of Monthly Rollup)
None None...
CVE-2018-1999006
A exposure of sensitive information vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Plugin.java that allows attackers to determine the date and time when a plugin HPI/JPI file was last extracted, which typically is the date of the most recent installation/upgrade...
Solarwinds LEM 6.3.1 Management Shell Arbitrary File Read Vulnerability
The management shell on Solarwinds Log and Event Manager Virtual Appliance version 6.3.1 allows the end user to edit the MOTD banner displayed during SSH logon. The editor provided for this is nano. This editor has a keyboard mapped function which lets the user import a file from the local file...
Apple OS X Date & Time Pref Pane Information Disclosure Vulnerability
Apple OS X is a specialized operating system developed by Apple for Mac computers.Date & Time Pref Pane is one of the components of the time and date display panel. An information disclosure vulnerability exists in the Date & Time Pref Pane component of Apple OS X versions prior to 10.12, which c...