13124 matches found
CVE-2024-36751
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...
PT-2025-2456 · Parse-Uri · Parse-Uri
Name of the Vulnerable Software and Affected Versions: parse-uri version 1.0.9 Description: The issue allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL. This can be achieved by manipulating the URL in a way that triggers a denial of service. Recommendations:...
PT-2025-3854 · Splunk · Splunk Supporting Add-On For Active Directory
Name of the Vulnerable Software and Affected Versions: Splunk Supporting Add-on for Active Directory versions 3.1.0 and earlier Description: A vulnerable regular expression pattern in the Splunk Supporting Add-on for Active Directory could lead to a Regular Expression Denial of Service ReDoS...
parse-uri security vulnerability
parse-uri is a lightweight module for parsing URIs from the individual developers at Kiko Beats. A security vulnerability exists in parse-uri v1.0.9. An attacker can exploit this vulnerability to trigger a regular expression denial of service via a crafted URL...
CVE-2024-36751
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...
CVE-2024-36751
The parse-uri library (version 1.0.9 ) is vulnerable to a Regular expression Denial of Service (ReDoS) . This vulnerability occurs because of inefficient regular expression processing , which allows an attacker to provide a crafted URL that triggers excessive backtracking, leading to a denial of ...
MonetDB security vulnerabilities
MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A security vulnerability exists in MonetDB version v11.47.11 that stems from an issue contained in the bindcolexp component. An attacker exploiting this vulnerability could cause a denial of...
logback-core Module Code Execution
The vulnerability of the logback-core module in the QOS monitoring system is related to the failure to take measures to neutralize special elements used in the expression language operator. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by using the...
Medium: nodejs
Issue Overview: Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string. CVE-2024-21538 Affected...
Medium: nodejs
Issue Overview: Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string. CVE-2024-21538 Affected...
Medium: nodejs20
Issue Overview: Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string. CVE-2024-21538 Affected...
Amazon Linux 2023 : nodejs20, nodejs20-devel, nodejs20-full-i18n (ALAS2023-2025-795)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-795 advisory. Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the...
CVE-2024-46242
An issue in the validateemail function in CTFd/utils/validators/init.py of CTFd 3.7.3 allows attackers to cause a Regular expression Denial of Service ReDoS via supplying a crafted string as e-mail address during registration...
CVE-2024-46242
An issue in the validateemail function in CTFd/utils/validators/init.py of CTFd 3.7.3 allows attackers to cause a Regular expression Denial of Service ReDoS via supplying a crafted string as e-mail address during registration...
CVE-2024-46242
An issue in the validateemail function in CTFd/utils/validators/init.py of CTFd 3.7.3 allows attackers to cause a Regular expression Denial of Service ReDoS via supplying a crafted string as e-mail address during registration...
CVE-2024-46242
The CTFd framework (version 3.7.3 ) contains a Regular expression Denial of Service (ReDoS) vulnerability in the validate_email function located at CTFd/utils/validators/__init__.py. Attackers can trigger this DoS by submitting a crafted string as an email address during the registration process....
Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities
Summary IBM Security QRadar EDR Software includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2024-21538 DESCRIPTION: Versions of the package cross-spawn befor...
Security Bulletin: Security Vulnerabilities in node.js packages affect IBM Voice Gateway
Summary Security Vulnerabilities in node.js packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-21538 DESCRIPTION: Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to...
serenity:FuzzJs: Heap-use-after-free in AK::HashSetResult AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, fals
Detailed Report: https://oss-fuzz.com/testcase?key=5886652911779840 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJs Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x50300000ed86 Crash State: AK::HashSetResult AK::HashTable,...