13121 matches found
Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities
Summary The product includes multiple vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM has addressed the relevant CVEs. Vulnerability Details CVEID:CVE-2024-4032 DESCRIPTION: An unspecified error with ipaddress considers some not...
CVE-2025-0367: Inefficient Regular Expression Complexity
In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service ReDoS attack...
Splunk Supporting Add-on for Active Directory security vulnerabilities
Splunk Supporting Add-on for Active Directory SA-ldapsearch is an add-on for Active Directory from Splunk. A security vulnerability exists in Splunk Supporting Add-on for Active Directory version 3.1.0 and earlier, which stems from a vulnerable regular expression pattern that could lead to a...
Security Bulletin: IBM App Connect Enterprise is vulnerable to Regular Expression Denial of Service (ReDoS) due to cross-spawn(CVE-2024-21538)
Summary IBM App Connect Enterprise is vulnerable to Regular Expression Denial of Service ReDoS due to cross-spawn. Vulnerability Details CVEID:CVE-2024-21538 DESCRIPTION: Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to improper...
Security Bulletin: A vulnerability in react affects IBM Robotic Process Automation and may result in a denial of service (CVE-2024-45296).
Summary A vulnerability in React affects IBM Robotic Process Automation and may result in a denial of service. React is used by IBM Robotic Process Automation as part of it's UI Framework. This bulletin identifies the security fix to apply to address the vulnerability. Vulnerability Details...
Security Bulletin: A pillarjs path-to-regexp vulnerability affects IBM Safer Payments (CVE-2024-45296)
Summary pillarjs path-to-regexp is used by IBM Safer Payments as part of UI navigation routes. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2024-45296 DESCRIPTION: pillarjs Path-to-RegExp is vulnerable to a denial of service, caused by a regular expression denial of...
Security Bulletin: IBM App Connect Enterprise is vulnerable to backtracking due to path-to-regexp (CVE-2024-52798)
Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor and IBM App Connect Enterprise Discovery Connectors are vulnerable to backtracking due to path-to-regexp. Vulnerability Details CVEID:CVE-2024-52798 DESCRIPTION: path-to-regexp turns path strings into a regular expressions...
@capawesome/cli (>=1.2.0, <=1.6.3), @crowd-engineers/logger (>=1.0.2, <=1.0.8) +44 more potentially affected by unknown CVE via @sentry/node (>=8.10.0, <=8.48.0)
@sentry/node NPM version =8.10.0, =1.2.0, =1.0.2, =1.6.4, =8.31.1, =0.0.16, =0.1.0, =1.10.0, =1.12.17, =1.26.29, =1.4.23, =3.11.1, =1.0.0, =1.7.1, =1.0.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...
PT-2025-62792
Уязвимость функции w expression match системы обнаружения и предотвращения вторжений Wazuh связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...
Regular Expression Denial of Service (ReDoS)
Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the removehtmltags function in utils.py, which can be exploited by a user to cause the application to...
Regular expression Denial of Service - ReDoS
Description A Regular Expression Denial of Service ReDoS vulnerability was identified in the Transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...
Regular Expression Denial Of Service (ReDoS)
Parse-uri is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression processing, which allows attackers to exploit crafted URLs and cause a denial of service...
OESA-2025-1053 podman security update
Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fixes: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of...
BIT-PYTHON-MIN-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client such as web browser connects to, could trigger a Regular Expression Denial of Service ReDOS during an authentication request with a specially crafted payload that is sen...
parse-uri Regular expression Denial of Service (ReDoS)
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL. PoC js async function exploit const parseuri = require"parse-uri"; // This input is designed to cause excessive backtracking in the regex const craftedInput = 'http://example.com...
GHSA-6FX8-H7JM-663J parse-uri Regular expression Denial of Service (ReDoS)
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL. PoC js async function exploit const parseuri = require"parse-uri"; // This input is designed to cause excessive backtracking in the regex const craftedInput = 'http://example.com...
CVE-2024-36751
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...
CVE-2024-36751
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...
PT-2025-2456 · Parse-Uri · Parse-Uri
Name of the Vulnerable Software and Affected Versions: parse-uri version 1.0.9 Description: The issue allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL. This can be achieved by manipulating the URL in a way that triggers a denial of service. Recommendations:...
PT-2025-3854 · Splunk · Splunk Supporting Add-On For Active Directory
Name of the Vulnerable Software and Affected Versions: Splunk Supporting Add-on for Active Directory versions 3.1.0 and earlier Description: A vulnerable regular expression pattern in the Splunk Supporting Add-on for Active Directory could lead to a Regular Expression Denial of Service ReDoS...