CVE-2020-7779

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service ReDoS by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!...

CVE-2020-7779

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service ReDoS by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!...

Code injection

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service ReDoS by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!...

CVE-2020-7779

CVE-2020-7779 affects all versions of the npm package djvalidator with a Regular Expression Denial of Service (ReDoS) when processing crafted invalid emails (e.g., --@-----...). This can lead to high CPU consumption and potential service impact. Multiple sources (GitHub advisory, OSV, NVD/NVD ent...

CVE-2020-7779 Regular Expression Denial of Service (ReDoS)

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service ReDoS by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!...

CVE-2020-7779

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service ReDoS by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!...

Djvalidator Security Vulnerability

Djvalidator is a jquery plugin for validating web forms from the individual developer David Esneyder Jerez. A security vulnerability exists in djvalidator that stems from vulnerability to regular expression denial of service...

Regular Expression Denial Of Service (ReDoS)

Handlebars is vulnerable to Regular Expression Denial of Service. The attacker is able to force the parser into an endless loop through maliciously crafted templates...

Atlassian Fisheye 和 Crucible 安全漏洞

Atlassian Fisheye and Crucible are both products of the Australian company Atlassian, Atlassian Fisheye is a suite of in-depth viewers of source code and Crucible is a suite of code review tools. A denial of service vulnerability exists in Atlassian Fisheye/Crucible, which can be exploited by an...

Apache Unomi 注入漏洞

Apache Unomi is a java open source client data platform that can be used on multiple systems to manage user profiles and the data associated with that profile, Unomi was announced as a top Apache project in 2019. Since Apache Unomi is built as an OSGi application running in Apache Karaf, it is...

Cron Utils Injection Vulnerability

Cron Utils is a Java codebase for authenticating, parsing, and migrating Cron expressions from the individual developers at Jmrozanec. An injection vulnerability exists in Cron-utils versions prior to 9.1.3, which can be exploited by an attacker to be able to inject arbitrary Java EL expressions,...

Infinite loop in aggregation expression

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.5; v3.6 versions prior to 3.6.10;...

Apache Unomi Remote Code Execution Vulnerability

Apache Unomi is a java open source client data platform that can be used on multiple systems to manage user profiles and the data associated with that profile, Unomi was announced as a top Apache project in 2019. Since Apache Unomi is built as an OSGi application running in Apache Karaf, it is...

Regular Expression Denial of Service (ReDoS)

Overview semver-regex is a Regular expression for matching semver versions Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS due to improper usage of regex in the semverRegex function. PoC js // import of the vulnerable library const semverRegex =...

Design/Logic Flaw

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are =8.12, =13.4, =13.5, 13.5.2...

CVE-2020-13349

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are =8.12, =13.4, =13.5, 13.5.2...

CVE-2020-13349

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are =8.12, =13.4, =13.5, 13.5.2...

CVE-2020-13349

Removed by vendor...

Regular Expression Denial Of Service (ReDoS)

liquid is vulnerable to regular expression denial of service. A Catastrophic Backtracking vulnerability allows an attacker crash the application by providing a malicious value to the RANGESREGEX regular expression...

Oracle Linux 8 : python3 (ELSA-2020-4433)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4433 advisory. - Avoid infinite loop when reading specially crafted TAR files CVE-2019-20907 Resolves: rhbz1856481 - Resolve hash collisions for Pv4Interface and...