Lucene search
+L

2996 matches found

BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.10 views

The vulnerability of the Perl programming language interpreter, related to errors in the processing of regular expressions, allows attackers to gain unauthorized access to information.

The vulnerability of the Perl programming language interpreter is related to errors in the processing of regular expressions, which can lead to reading beyond the buffer boundaries when the buffer is overflowing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

9.1CVSS6.9AI score0.09524EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.11 views

The vulnerability of the Perl programming language interpreter, related to errors in processing regular expressions, allows attackers to execute arbitrary code.

The vulnerability of the Perl programming language interpreter is related to errors in the processing of regular expressions, which can lead to the execution of the write operation beyond the buffer boundaries when the buffer is overflowing. Exploiting this vulnerability allows a remote attacker ...

9.8CVSS7.5AI score0.0606EPSS
SaveExploits1References5Affected Software2
OSV
OSV
added 2019/02/26 2:26 p.m.9 views

USN-3895-1 ldb vulnerability

It was discovered that LDB incorrectly handled certain search expressions. A remote attacker could possibly use this issue to cause the Samba LDAP process to crash, resulting in a denial of service...

6.5CVSS6.8AI score0.02821EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2019/02/26 2:29 a.m.46 views

CVE-2009-5155

In the GNU C Library aka glibc or libc6 before 2.28, parseregexp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service assertion failure and application exit or trigger an incorrect result by attempting a regular-expression match...

7.5CVSS6.7AI score0.03906EPSS
SaveExploits1References2
OSV
OSV
added 2019/02/13 2:29 p.m.12 views

DEBIAN-CVE-2018-20164

An issue was discovered in regex.yaml aka regexes.yaml in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service ReDoS issue allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to a value containing a long digit string. The UAP-Core...

5.3CVSS7AI score0.03298EPSS
SaveExploits2References1
RedHat Linux
RedHat Linux
added 2019/02/04 11:51 p.m.8 views

django: Catastrophic backtracking in regular expressions via 'urlize' and 'urlizetrunc'

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions only one regular expression for Django...

5.3CVSS7.2AI score0.04554EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2019/01/16 5:53 p.m.9 views

django: Catastrophic backtracking in regular expressions via 'urlize' and 'urlizetrunc'

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions only one regular expression for Django...

5.3CVSS7.2AI score0.04554EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2019/01/16 5:53 p.m.116 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

5.3CVSS6.6AI score0.04554EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2019/01/16 5:10 p.m.28 views

django: Catastrophic backtracking in regular expressions via 'urlize' and 'urlizetrunc'

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions only one regular expression for Django...

5.3CVSS7.2AI score0.04554EPSS
SaveExploits0References5
Packet Storm
Packet Storm
added 2019/01/11 12:00 a.m.79 views

UA-Parser Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 X41 D-SEC GmbH Security Advisory: X41-2018-009 ReDoS Vulnerability in UA-Parser ================================ Severity Rating: Medium Confirmed Affected Versions: 2015-05-14 and newer, commit 6fd6c261274254bcbbacd77ef4b12534c7f9923d Confirmed...

5.3AI score0.03298EPSS
SaveExploits2
Github Security Blog
Github Security Blog
added 2019/01/04 5:50 p.m.52 views

Django denial-of-service possibility in urlize and urlizetrunc template filters

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions only one regular expression for Django...

5.3CVSS5.8AI score0.04554EPSS
SaveExploits0References15Affected Software1
Kitploit
Kitploit
added 2019/01/02 8:38 p.m.161 views

Cuteit - Make A Malicious IP A Bit Cuter (IP Obfuscator)

A simple python tool to help you to social engineer, bypass whitelisting firewalls, potentially break regex rules for command line logging looking for IP addresses and obfuscate cleartext strings to C2 locations within the payload. All of that is simply done with obfuscating ip to many forms...

7.5AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2019/01/02 1:30 p.m.9 views

perl: Heap-based buffer overflow in S_handle_regex_sets()

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

9.8CVSS7.6AI score0.12093EPSS
SaveExploits1References4
OSV
OSV
added 2018/12/05 10:29 p.m.4 views

DEBIAN-CVE-2018-18312

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

9.8CVSS9.6AI score0.12093EPSS
SaveExploits1References1
Ubuntu
Ubuntu
added 2018/12/03 6:53 p.m.119 views

USN-3834-2: Perl vulnerabilities

USN-3834-1 fixed a vulnerability in perl. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Jayakrishna Menon discovered that Perl incorrectly handled Perlmysetenv. An attacker could use this issue to cause Perl to crash, resulting in a denial of...

9.8CVSS7.5AI score0.11676EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2018/12/03 5:36 p.m.210 views

USN-3834-1: Perl vulnerabilities

Jayakrishna Menon discovered that Perl incorrectly handled Perlmysetenv. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-18311 Eiichi Tsukata discovered that Perl incorrectly handled certain regular expression...

9.8CVSS7.5AI score0.12093EPSS
SaveExploits3
OSV
OSV
added 2018/12/03 5:36 p.m.14 views

USN-3834-1 perl vulnerabilities

Jayakrishna Menon discovered that Perl incorrectly handled Perlmysetenv. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-18311 Eiichi Tsukata discovered that Perl incorrectly handled certain regular expression...

9.8CVSS6.9AI score0.12093EPSS
SaveExploits3References5
CNVD
CNVD
added 2018/12/03 12:00 a.m.11 views

Perl Heap Overflow Vulnerability

Perl is a high-level, general-purpose, interpreted, dynamic programming language. A heap overflow vulnerability exists in Sregatom in 'regcomp.c' in Perl 5.28 during compilation, which can be exploited by a remote attacker to execute arbitrary code via specially crafted regular expressions...

9.8CVSS9.9AI score0.12093EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2018/11/14 12:00 a.m.55 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Python vulnerabilities (USN-3817-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3817-1 advisory. It was discovered that Python incorrectly handled large amounts of data. A remote attacker could use this issue to cause Python t...

9.8CVSS7.1AI score0.20126EPSS
SaveExploits2References6
OpenVAS
OpenVAS
added 2018/11/14 12:00 a.m.47 views

Ubuntu: Security Advisory (USN-3817-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.20126EPSS
SaveExploits2References2
Rows per page
Query Builder