Lucene search
+L

21 matches found

RedhatCVE
RedhatCVE
•added 2025/02/06 3:56 a.m.•17 views

CVE-2021-39157

detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The problem has been patched in detect-character-encoding v0.7.0. No workaround are available and all...

7.5CVSS6.6AI score0.02068EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/11/09 3:06 a.m.•33 views

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service. The vulnerability exists in the loadxmtdone function of loaderxmt.c because of the missing release of allocated memory after an effective lifetime in detect-character-encoding which allows to the attacker to crash the application...

5.5CVSS5.5AI score0.00289EPSS
SaveExploits1References4Affected Software2
vulnersOsv
vulnersOsv
•added 2021/09/01 6:25 p.m.•10 views

csv-extractor (1.0.0), mi-lib (>=0.0.10, <=0.0.16) +1 more potentially affected by CVE-2021-39176 via detect-character-encoding (0.2.1)

detect-character-encoding NPM version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on detect-character-encoding and may be impacted: - csv-extractor 1.0.0 - mi-lib =0.0.10, =0.3.0, =0.3.1 Source cves: CVE-2021-39176 Source advisory:...

7.5CVSS7.4AI score0.01891EPSS
SaveExploits1
NVD
NVD
•added 2021/08/31 6:15 p.m.•37 views

CVE-2021-39176

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

7.5CVSS0.01891EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/08/31 6:15 p.m.•12 views

CVE-2021-39176

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

7.5CVSS5.9AI score0.01891EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2021/08/31 6:05 p.m.•100 views

CVE-2021-39176

CVE-2021-39176 (detect-character-encoding) affects the detect-character-encoding library (ICU-based) up to version 0.3.0. The root cause is that allocated memory is not released, leading to memory exhaustion. The issue has been patched in v0.3.1. Related advisories (GitHub GHSA, OSV, Red Hat, NVD...

7.5CVSS7.5AI score0.01891EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/08/31 6:05 p.m.•47 views

CVE-2021-39176 Missing Release of Memory after Effective Lifetime in detect-character-encoding

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

7.5CVSS7.7AI score0.01891EPSS
SaveExploits1References4
Mend
Mend
•added 2021/08/31 6:05 p.m.•3 views

CVE-2021-39176

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

8.7CVSS0.01891EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/31 12:00 a.m.•10 views

CVE-2021-39176: Missing Release of Memory after Effective Lifetime

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

7.5CVSS5.7AI score0.01891EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/08/31 12:00 a.m.•7 views

PT-2021-22434

Name of the Vulnerable Software and Affected Versions detect-character-encoding versions 0.3.0 and earlier Description The issue is related to allocated memory not being released in detect-character-encoding versions 0.3.0 and earlier. This can cause a program using the library to become...

7.5CVSS0.01891EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2021/08/31 12:00 a.m.•24 views

detect-character-encoding 安全漏洞

detect-character-encoding is an open source C++ plugin. A security vulnerability exists in detect-character-encoding 0.3.0 and earlier versions, which is caused by software that does not free allocated memory...

7.5CVSS7.3AI score0.01891EPSS
SaveExploits1References5
vulnersOsv
vulnersOsv
•added 2021/08/25 2:44 p.m.•7 views

book2json (>=1.0.0, <=1.0.1), csv-extractor (1.0.0) +8 more potentially affected by CVE-2021-39157 via detect-character-encoding (>=0.2.1, <=0.6.0)

detect-character-encoding NPM version =0.2.1, =1.0.0, =1.0.0-beta.5, =0.0.10, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.3.2 - whois-2 0.0.1 Source cves: CVE-2021-39157 Source advisory: OSV:GHSA-JQFH-8HW5-FQJR...

7.5CVSS7.4AI score0.02068EPSS
SaveExploits1
OSV
OSV
•added 2021/08/24 7:15 p.m.•23 views

CVE-2021-39157

detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The problem has been patched in detect-character-encoding v0.7.0. No workaround are available and all...

7.5CVSS6.7AI score
SaveExploits0References3
NVD
NVD
•added 2021/08/24 7:15 p.m.•26 views

CVE-2021-39157

detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The problem has been patched in detect-character-encoding v0.7.0. No workaround are available and all...

7.5CVSS0.02068EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/08/24 7:15 p.m.•12 views

CVE-2021-39157

detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The problem has been patched in detect-character-encoding v0.7.0. No workaround are available and all...

7.5CVSS5.8AI score0.02068EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2021/08/24 6:15 p.m.•69 views

CVE-2021-39157

The CVE-2021-39157 entry relates to detect-character-encoding, a library where data matching with no charset in versions ≤0.6.0 can crash a Node.js process. The issue is resolved by upgrading to v0.7.0, as documented in Red Hat and GHSA advisories, with no workaround provided. Impact is a crash/d...

7.5CVSS7.5AI score0.02068EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/08/24 6:15 p.m.•36 views

CVE-2021-39157 Improper Handling of Exceptional Conditions in detect-character-encoding

detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The problem has been patched in detect-character-encoding v0.7.0. No workaround are available and all...

7.5CVSS7.6AI score0.02068EPSS
SaveExploits1References3
Mend
Mend
•added 2021/08/24 6:15 p.m.•4 views

CVE-2021-39157

detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The problem has been patched in detect-character-encoding v0.7.0. No workaround are available and all...

8.7CVSS0.02068EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2021/08/24 12:00 a.m.•6 views

PT-2021-22414

Name of the Vulnerable Software and Affected Versions detect-character-encoding versions 0.6.0 and earlier Description The issue occurs when data matching no charset causes the Node.js process to crash. This problem has been patched in version 0.7.0. Recommendations For detect-character-encoding...

7.5CVSS0.02068EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2021/08/24 12:00 a.m.•18 views

detect-character-encoding 安全漏洞

detect-character-encoding is an open source C++ plugin. A security vulnerability exists in detect-character-encoding, which stems from an authorization bypass vulnerability found in istio istio. Case-insensitive host comparisons were incorrect when computing rules specified with host or notHost...

7.5CVSS7.3AI score0.02068EPSS
SaveExploits1References4
Rows per page
Query Builder