Lucene search
+L

1162 matches found

BDU FSTEC
BDU FSTEC
•added 2021/06/18 12:00 a.m.•15 views

glibc Heap Use-After-Free Privilege Escalation

The vulnerability of the glob function in the glibc library of the Aurora operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7CVSS7.1AI score0.00549EPSS
SaveExploits0References11Affected Software5
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•33 views

SUSE: Security Advisory (SUSE-SU-2013:1251-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS8.7AI score0.04113EPSS
SaveExploits5References2
nodejs
nodejs
•added 2021/06/07 9:57 p.m.•278 views

Regular expression denial of service

Overview glob-parent before 5.1.2 has a regular expression denial of service vulnerability. The enclosure regex used to check for strings ending in enclosure containing path separator. Recommendation Upgrade to version 5.1.2 or later References - CVE - GitHub Advisory...

5CVSS4.8AI score0.04579EPSS
SaveExploits1Affected Software1
vulnersOsv
vulnersOsv
•added 2021/06/07 9:56 p.m.•8 views

@aisino/cli-plugin-unit-mocha (>=0.0.1, <=1.0.15), @aws-amplify/cli (4.44.1-beta.0) +29 more potentially affected by CVE-2020-28469 via glob-parent (>=5.0.0, <=5.1.1)

glob-parent NPM version =5.0.0, =0.0.1, =0.0.1, =5.0.1, =0.6.1, =0.14.0, =26.4.0, =0.0.2, =4.0.0-alpha.0, =1.0.0-alpha2, =2.21.3-beta.0, =2.22.2 - amplify-provider-awscloudformation 4.39.1-beta.0 - amplify-util-mock 3.28.1-beta.0 and more Source cves: CVE-2020-28469 Source advisory:...

7.5CVSS6.6AI score0.04579EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2021/06/07 9:56 p.m.•1003 views

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS8.4AI score0.04579EPSS
SaveExploits1References11Affected Software1
osv_ghsa
osv_ghsa
•added 2021/06/07 9:56 p.m.•21 views

GHSA-WW39-953V-WCQ6 glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS7.1AI score0.04579EPSS
SaveExploits1References11
NVD
NVD
•added 2021/06/03 4:15 p.m.•26 views

CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS0.04579EPSS
SaveExploits1References7
osv_debian
osv_debian
•added 2021/06/03 4:15 p.m.•6 views

DEBIAN-CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS7.1AI score0.04579EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2021/06/03 4:15 p.m.•17 views

AZL-44862 CVE-2020-28469 affecting package js-jquery 3.5.0-4

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS6.7AI score0.04579EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2021/06/03 4:15 p.m.•34 views

AZL-44118 CVE-2020-28469 affecting package nodejs-nodemon 2.0.3-5

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS6.7AI score0.04579EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/06/03 4:15 p.m.•45 views

CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS6.5AI score
SaveExploits0References7
Prion
Prion
•added 2021/06/03 4:15 p.m.•33 views

Design/Logic Flaw

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

5CVSS8.3AI score0.04579EPSS
SaveExploits1References7Affected Software2
CVE
CVE
•added 2021/06/03 3:15 p.m.•705 views

CVE-2020-28469

CVE-2020-28469 affects the glob-parent package prior to v5.1.2. The flaw arises from the enclosure-regex used to validate strings ending in an enclosure that contains a path separator. The described effect is a Regular Expression Denial of Service (ReDoS) scenario. Affected software/component: gl...

7.5CVSS7.2AI score0.04579EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2021/06/03 3:15 p.m.•39 views

CVE-2020-28469 Regular Expression Denial of Service (ReDoS)

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

5.3CVSS8.5AI score0.04579EPSS
SaveExploits1References7
Mend
Mend
•added 2021/06/03 3:15 p.m.•5 views

CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS0.04579EPSS
SaveExploits1References10
Debian CVE
Debian CVE
•added 2021/06/03 3:15 p.m.•68 views

CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS8.8AI score0.04579EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/03 12:00 a.m.•7 views

CVE-2020-28469: Uncontrolled Resource Consumption

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

7.5CVSS7.5AI score0.04579EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
•added 2021/05/11 2:53 p.m.•105 views

Security Bulletin: A security vulnerability in Node.js glob-parent module affects IBM Cloud Automation Manager.

Summary A security vulnerability in Node.js glob-parent module affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2020-28469 DESCRIPTION: Node.js glob-parent module is vulnerable to a denial of service. By sending a specially-crafted request, a remote attacker could exploit th...

7.5CVSS1.9AI score0.04579EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
•added 2021/05/05 12:00 a.m.•9 views

nodejs 资源管理错误漏洞

nodejs is a JavaScript runtime environment based on the ChromeV8 engine by wrapping the Chromev8 engine and using event-driven and non-blocking IO applications make it possible to develop high-performance backend applications in Javascript. A resource management error vulnerability exists in...

7.5CVSS7.2AI score0.04579EPSS
SaveExploits1References39
RedHat Linux
RedHat Linux
•added 2021/05/04 8:14 p.m.•126 views

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.3 security and bug fix update

Red Hat Advanced Cluster Management for Kubernetes 2.2.3 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

9.1CVSS6.9AI score0.16657EPSS
SaveExploits5References10
Rows per page
Query Builder