Lucene search
+L

1079 matches found

Vulnrichment
Vulnrichment
•added 2025/11/19 9:28 a.m.•8 views

CVE-2025-11230 Denial of service vulnerability in HAProxy mjson library

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests...

7.5CVSS7.2AI score0.0069EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/19 9:28 a.m.•96 views

CVE-2025-11230

CVE-2025-11230 affects HAProxy due to inefficient algorithm complexity in the mjson library, enabling remote denial-of-service via specially crafted JSON requests. Connected documents specify vulnerable haproxy versions: < 2.4.24-2 and

7.5CVSS7.2AI score0.0069EPSS
SaveExploits0References1Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/19 12:00 a.m.•2 views

CVE-2025-11230: Inefficient Algorithmic Complexity

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests...

7.5CVSS7.2AI score0.0069EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/19 12:00 a.m.•16 views

HAProxy 安全漏洞

HAProxy is an open source TCP/HTTP load balancing server from the French company HAProxy. The server provides 4-layer and 7-layer proxies, and can support tens of thousands of level connections, with high efficiency and stability. A security vulnerability exists in HAProxy that stems from...

7.5CVSS7.2AI score0.0069EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/13 12:00 a.m.•7 views

CVE-2025-62484: Inefficient Regular Expression Complexity

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access...

9.8CVSS5.7AI score0.003EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/11/07 12:00 a.m.•9 views

The vulnerability of the jpegBase::readMetadata() function in the library and the command-line utility for managing image metadata from Exiv2 allows a attacker to cause a service failure.

The vulnerability of the jpegBase::readMetadata function in the Exiv2 library and command-line utilities for managing image metadata involves inefficient algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

5.5CVSS6.8AI score0.00242EPSS
SaveExploits1References6Affected Software2
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•4 views

PT-2025-45834

Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability in github.com/apache/trafficcontrol...

5.8AI score0.00736EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/10/17 4:55 p.m.•15 views

CVE-2025-61581

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

7.5CVSS7.9AI score0.00736EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/16 9:30 a.m.•26 views

EUVD-2025-34739

Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability...

8AI score0.00736EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/16 12:00 a.m.•5 views

CVE-2025-61581: Inefficient Regular Expression Complexity

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

7.5CVSS5.8AI score0.00736EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/10/08 7:06 p.m.•28 views

rexml: REXML: Denial of Service via inefficient regex parsing

A flaw was found in REXML. A remote attacker could exploit inefficient regular expression regex parsing when processing hex numeric character references &x...; in XML documents. This could lead to a Regular Expression Denial of Service ReDoS, impacting the availability of the affected component...

7.5CVSS7.3AI score0.00487EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2020-24106

Malware in sbrugna...

7.5CVSS4.8AI score0.0092EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2021-1971

Malware in sbrugna...

7.8CVSS7.5AI score0.01262EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-0231

Malware in sbrugna...

7.8CVSS7.6AI score0.03371EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-1966

Malware in sbrugna...

7.5CVSS7.6AI score0.01517EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-2109

Malware in sbrugna...

7.5CVSS7.6AI score0.02206EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
•added 2025/10/06 12:00 a.m.•27 views

The vulnerability of the SubWordJapaneseTokenizer function in the Hugging Face Transformers library, which allows a hacker to trigger a service failure.

The vulnerability of the SubWordJapaneseTokenizer function in the Hugging Face Transformers library is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

5CVSS6AI score0.00484EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/06 12:00 a.m.•23 views

The vulnerability of the normalize_numbers() function in the Hugging Face Transformers library, which allows a compromitter to trigger a ReDoS attack.

The vulnerability of the normalizenumbers function in the Hugging Face Transformers library is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a remote attacker to trigger a service denial-of-service attack ReDos...

5.3CVSS6.1AI score0.00382EPSS
SaveExploits1References3Affected Software1
Rockylinux
Rockylinux
•added 2025/10/04 12:11 a.m.•16 views

gnutls security update

An update is available for gnutls. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnutls packages provide the GNU Transport Layer Security GnuTLS library,...

5.3CVSS7.1AI score0.01292EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-0444

Malicious code in bioql PyPI...

5.3CVSS5.8AI score0.01204EPSS
SaveExploits1References6
Rows per page
Query Builder