Lucene search
+L

155 matches found

Prion
Prion
•added 2021/09/15 1:15 p.m.•22 views

Design/Logic Flaw

prism is vulnerable to Inefficient Regular Expression Complexity...

4.3CVSS6.4AI score0.01036EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2021/09/15 8:15 a.m.•22 views

CVE-2021-3777

nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.6AI score
SaveExploits0References2
CVE
CVE
•added 2021/09/15 7:15 a.m.•90 views

CVE-2021-3777

CVE-2021-3777: nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity (ReDoS). IBM X-Force lists CVSS v3.1 base score 7.5 (HIGH) with Network attack vector, no user interaction, and Availability impact. No remediation details are provided in the supplied documents.

7.8CVSS7.5AI score0.01298EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/15 12:00 a.m.•3 views

CVE-2021-3794: Inefficient Regular Expression Complexity

vuelidate is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS5.8AI score0.01222EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/15 12:00 a.m.•6 views

CVE-2021-3795: Inefficient Regular Expression Complexity

semver-regex is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS8.2AI score0.01517EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/15 12:00 a.m.•3 views

CVE-2021-3777: Inefficient Regular Expression Complexity

nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS5.8AI score0.01298EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/15 12:00 a.m.•3 views

CVE-2021-3801: Inefficient Regular Expression Complexity

prism is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.6AI score0.01036EPSS
SaveExploits1References2
Huntr
Huntr
•added 2021/09/04 4:23 p.m.•32 views

Inefficient Regular Expression Complexity in daaku/nodejs-tmpl

✍️ Description It allows cause a denial of service when formatting crafted string. 🕵️‍♂️ Proof of Concept // PoC.js var tmpl = require"tmpl" forvar i = 1; i = 50000; i++ var time = Date.now; var attackstr = ""+"".repeati10000+"answer"; tmplattackstr, answer: 42 var timecost = Date.now - time;...

7.8CVSS2.1AI score0.01298EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2021/09/01 6:23 p.m.•81 views

axios Inefficient Regular Expression Complexity vulnerability

axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS7.5AI score0.08515EPSS
SaveExploits2References17Affected Software1
NVD
NVD
•added 2021/08/31 11:15 a.m.•32 views

CVE-2021-3749

axios is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS0.08515EPSS
SaveExploits2References14
CVE
CVE
•added 2021/08/31 10:36 a.m.•724 views

CVE-2021-3749

CVE-2021-3749 affects the Axios package used by IBM Cloud Pak System and Node.js environments. It is a Denial of Service vulnerability via a regular-expression DoS in the trim function, exploitable by crafted input to cause high CPU usage. Remediation is to upgrade to fixed software; IBM Cloud Pa...

7.8CVSS7.4AI score0.08515EPSS
SaveExploits2References14Affected Software1
Debian CVE
Debian CVE
•added 2021/08/31 10:36 a.m.•66 views

CVE-2021-3749

axios is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS7.5AI score0.08515EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/31 12:00 a.m.•4 views

CVE-2021-3749: Inefficient Regular Expression Complexity

axios is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS7.5AI score0.08515EPSS
SaveExploits2References3
OSV
OSV
•added 2021/07/16 2:15 p.m.•19 views

CVE-2021-3649

chatwoot is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.8AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/16 12:00 a.m.•4 views

CVE-2021-3649: Inefficient Regular Expression Complexity

chatwoot is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS5.8AI score0.01222EPSS
SaveExploits1References2
Rows per page
Query Builder