CVE-2021-42836

GJSON before 1.9.3 allows a ReDoS regular expression denial of service attack...

Ruby: RDoc::MethodAttr is vulnerable to Regular Expression Denial of Service (ReDoS)

Vulnerability description not provided...

CVE-2021-38481

The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string...

AUVESY Versiondog SQL Injection Vulnerability

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. AUVESY Versiondog suffers from a SQL injection vulnerability that could be exploited by an attacker to send a malicious load that enables a user to execute another SQL...

SUSE SLED15: libpython2_7-1_0 / python / python-base / python-curses / etc (SUSE-SU-2021:3489-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3489-1 advisory. - CVE-2021-3737: Fixed http client infinite line reading DoS after a http 100. bsc1189241 - CVE-2021-3733: Fixed ReDoS in...

OPENSUSE-SU-2021:3489-1 Security update for python

This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading DoS after a http 100. bsc1189241 - CVE-2021-3733: Fixed ReDoS in urllib.request. bsc1189287...

Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to regular expression denial of service due to a vulnerability in the Node.js validator module

Summary IBM App Connect Enterprise Certified Container may be vulnerable to a regular expression denial of service attack when parsing an Open API/Swagger document, due to a vulnerability in the Node.js validator module Vulnerability Details Third Party Entry: 207314 DESCRIPTION: Node.js validato...

AUVESY Versiondog SQL注入漏洞

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. AUVESY Versiondog suffers from a SQL injection vulnerability that could be exploited by an attacker to send a malicious load that enables a user to execute another SQL...

Inefficient Regular Expression Complexity in cfinke/typo.js

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in typo-js. It allows causing a denial of service when calling function removeAffixComments. Proof of Concept // PoC.js var Typo = require"typo-js" var emptydict = new Typo; forvar i = 1; i = 50000; i++...

OTRS ReDoS Vulnerability (OSA-2021-19)

OTRS is prone to regular expression denial of service ReDoS vulnerability in postcs. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Inefficient Regular Expression Complexity in stylelint/stylelint

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in stylelint. It allows causing a denial of service when calling function isKeyframeSelector. Proof of Concept // PoC.js var isKeyframeSelector = require"stylelint/lib/utils/isKeyframeSelector" forvar i ...

Updated python-mpmath packages fix security vulnerability

Fix CVE-2021-29063 regular expression denial of service...

MGASA-2021-0473 Updated python-flask-restx packages fix security vulnerability

Regular expression denial of service in emailregex...

Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8

Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 Vaadin versions 8.0.0 through 8.12.4 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

GHSA-JFMF-W293-8XR8 Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8

Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 Vaadin versions 8.0.0 through 8.12.4 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

Design/Logic Flaw

checksmart before 6.9.1 allows unintended drive access by an unprivileged user because it only checks for a substring match of a device path the /dev/bus substring and a number, aka an unanchored regular expression...

Regular Expression Denial Of Service (ReDoS)

devextreme is vulnerable to regular expression denial of service. The vulnerability exists in validationengine.js because Incorrect sanitations in email validator allows an attacker to use malicious inputs resulting in denial of service conditions...

CVE-2021-42257

checksmart before 6.9.1 allows unintended drive access by an unprivileged user because it only checks for a substring match of a device path the /dev/bus substring and a number, aka an unanchored regular expression...

CVE-2021-42257

The CVE-2021-42257 issue affects check_smart prior to version 6.9.1, where an unprivileged user could gain unintended drive access because the check only matches a substring of a device path (the /dev/bus substring and a number) via an unanchored regular expression. The root cause is a permissive...

DynamicPageList3 Extended Resource Management Error Vulnerability

The DynamicPageList3 extension is a reporting tool for MediaWiki that lists category members and intersections in various formats and details.The DynamicPageList3 extension is vulnerable to a resource management error that stems from an unprocessed regular expression date entered in a parameter o...