Lucene search
+L

13152 matches found

Cvelist
Cvelist
•added 2024/10/26 8:26 p.m.•32 views

CVE-2020-26309 GHSL-2020-303: Regular Expression Denial of Service (ReDoS) in nope-validator

Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any patches are available...

8.7CVSS0.00454EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/26 8:26 p.m.•27 views

CVE-2020-26308 GHSL-2020-302: Regular Expression Denial of Service (ReDoS) in validate.js

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS0.00514EPSS
SaveExploits1References2
Mend
Mend
•added 2024/10/26 8:26 p.m.•7 views

CVE-2020-26308

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS5.9AI score0.00514EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/10/26 8:26 p.m.•7 views

CVE-2020-26308 GHSL-2020-302: Regular Expression Denial of Service (ReDoS) in validate.js

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS5.9AI score0.00514EPSS
SaveExploits1References2
CVE
CVE
•added 2024/10/26 8:26 p.m.•87 views

CVE-2020-26308

CVE-2020-26308 affects Validate.js (versions ≤ 0.13.1). The vulnerability stems from one or more regular expressions that can cause Regular Expression Denial of Service (ReDoS). The connected documents consistently describe ReDoS and note that, as of publication, no patches are available. No expl...

8.7CVSS5.9AI score0.00514EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2024/10/26 8:26 p.m.•66 views

CVE-2020-26307

HTML2Markdown (JavaScript) is vulnerable to Regular Expression Denial of Service (ReDoS) across all versions. The root cause is improperly crafted regular expressions used during HTML to Markdown conversion. As of publication, there are no patches available. Connected sources corroborate a ReDoS ...

8.7CVSS5.7AI score0.00406EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/26 8:26 p.m.•19 views

CVE-2020-26307 GHSL-2020-301: Regular Expression Denial of Service (ReDoS) in HTML2Markdown

HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS5.7AI score0.00406EPSS
SaveExploits0References2
Mend
Mend
•added 2024/10/26 8:26 p.m.•8 views

CVE-2020-26306

Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are...

8.7CVSS5.9AI score0.00454EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/10/26 8:26 p.m.•9 views

CVE-2020-26306 GHSL-2020-296: Regular Expression Denial of Service (ReDoS) in Knwl.js

Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are...

8.7CVSS5.9AI score0.00454EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/26 8:26 p.m.•65 views

CVE-2020-26306

Knwl.js (JavaScript) versions 1.0.2 and earlier are vulnerable to Regular Expression Denial of Service (ReDoS) due to inefficient regular expressions. No patches were available at the time of publication. The issue affects text parsing of dates, times, phone numbers, emails, and locations; exploi...

8.7CVSS5.9AI score0.00454EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/26 8:26 p.m.•79 views

CVE-2020-26305

CVE-2020-26305 concerns the CommonRegexJS library (a CommonRegex port for JavaScript). Multiple connected sources confirm that all available versions are affected by Regular Expression Denial of Service (ReDoS) due to inefficient or vulnerable regular expressions used by the library. The underlyi...

8.7CVSS5.7AI score0.00479EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/10/26 8:26 p.m.•32 views

CVE-2020-26304 GHSL-2020-290: Regular Expression Denial of Service (ReDoS) in foundation-sites

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any fixes are available...

8.7CVSS0.00539EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/10/26 8:26 p.m.•20 views

CVE-2020-26304 GHSL-2020-290: Regular Expression Denial of Service (ReDoS) in foundation-sites

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any fixes are available...

8.7CVSS5.8AI score0.00539EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/10/26 8:26 p.m.•7 views

CVE-2020-26303 GHSL-2020-289: Regular Expression Denial of Service (ReDoS) in insane

insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS7.3AI score0.00539EPSS
SaveExploits1References2
CVE
CVE
•added 2024/10/26 8:26 p.m.•81 views

CVE-2020-26303

The CVE-2020-26303 entry concerns the insane HTML sanitizer. Affected versions are 2.6.2 and earlier. The underlying issue is a Regular Expression Denial of Service (ReDoS) vulnerability in one or more regular expressions used by the sanitizer. Public documentation indicates that as of publicatio...

8.7CVSS7.3AI score0.00539EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/26 12:00 a.m.•8 views

CVE-2020-26304: Inefficient Regular Expression Complexity

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any fixes are available...

8.7CVSS5.9AI score0.00539EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/26 12:00 a.m.•6 views

CVE-2020-26305: Inefficient Regular Expression Complexity

CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS5.8AI score0.00479EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/26 12:00 a.m.•5 views

CVE-2020-26308: Inefficient Regular Expression Complexity

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS5.9AI score0.00514EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/26 12:00 a.m.•6 views

CVE-2020-26309: Inefficient Regular Expression Complexity

Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any patches are available...

8.7CVSS5.9AI score0.00454EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/26 12:00 a.m.•8 views

CVE-2020-26310: Inefficient Regular Expression Complexity

Validate.js provides a declarative way of validating javascript objects. All versions as of 30 November 2020 contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any patches are available...

8.7CVSS5.8AI score0.00406EPSS
SaveExploits0References1
Rows per page
Query Builder