Lucene search
+L

106 matches found

CVE
CVE
•added 2022/06/01 4:47 p.m.•226 views

CVE-2021-43306

The CVE-2021-43306 entry concerns the jQuery Validation Plugin (jquery-validation). The vulnerability is a Regular Expression Denial of Service (ReDoS) triggered when an attacker can supply arbitrary input to the url2 method, due to an incomplete fix for CVE-2021-43306. Affected versions are thos...

7.5CVSS6.4AI score0.01523EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
•added 2022/06/01 4:47 p.m.•81 views

CVE-2021-43306

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.6AI score0.01523EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/01 12:00 a.m.•11 views

CVE-2021-43306: Inefficient Regular Expression Complexity

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.4AI score0.01523EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/06/01 12:00 a.m.•21 views

PT-2022-11818 · Npm · Jquery-Validation

Name of the Vulnerable Software and Affected Versions: jquery-validation npm package affected versions not specified Description: An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package when an attacker is able to supply arbitrary input to t...

7.5CVSS7.4AI score0.01523EPSS
SaveExploits1References14
attackerkb
attackerkb
•added 2022/05/29 11:05 p.m.•33 views

CVE-2021-43306

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.2AI score0.01523EPSS
SaveExploits1References2
nodejs
nodejs
•added 2021/02/19 6:50 p.m.•81 views

Regular Expression Denial of Service

Overview The GitHub Security Lab team has identified potential security vulnerabilities in jquery-validation. The project contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service Recommendation Upgrade to fixed version 1.19.3 or later References -...

5CVSS4.1AI score0.03575EPSS
SaveExploits0Affected Software1
Veracode
Veracode
•added 2021/01/14 5:32 a.m.•45 views

Regular Expression Denial Of Service (ReDoS)

jquery-validation is vulnerable to regular expression denial of service. An insecure use of a regular expression to parse URLs allows an attacker to cause a denial of service condition via a malicious URL...

7.5CVSS5.4AI score0.03575EPSS
SaveExploits0References9Affected Software3
NVD
NVD
•added 2021/01/13 7:15 p.m.•37 views

CVE-2021-21252

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

7.5CVSS6.1AI score0.03575EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2021/01/13 7:15 p.m.•39 views

CVE-2021-21252

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

7.5CVSS7.4AI score
SaveExploits0References6
osv_debian
osv_debian
•added 2021/01/13 7:15 p.m.•7 views

DEBIAN-CVE-2021-21252

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

7.5CVSS5.5AI score0.03575EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/13 7:15 p.m.•13 views

CVE-2021-21252

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

7.5CVSS6.3AI score0.03575EPSS
SaveExploits0References7Affected Software1
osv_ubuntu
osv_ubuntu
•added 2021/01/13 7:15 p.m.•19 views

UBUNTU-CVE-2021-21252

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

7.5CVSS6.1AI score0.03575EPSS
SaveExploits0References4
Prion
Prion
•added 2021/01/13 7:15 p.m.•28 views

Input validation

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

5CVSS7.4AI score0.03575EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
•added 2021/01/13 7:15 p.m.•43 views

CVE-2021-21252

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

7.5CVSS6.3AI score0.03575EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2021/01/13 6:21 p.m.•10 views

@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2021-21252 via jquery-validation (>=1.14.0, <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2021-21252 Source advisory: OSV:GHSA-JXWX-85VP-GVWM...

7.5CVSS5.4AI score0.03575EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/13 6:21 p.m.•3 views

@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2021-21252 via jquery-validation (>=1.14.0, <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2021-21252 Source advisory: GHSA-JXWX-85VP-GVWM...

7.5CVSS0.03575EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2021/01/13 6:21 p.m.•151 views

Regular Expression Denial of Service in jquery-validation

The GitHub Security Lab team has identified potential security vulnerabilities in jquery.validation. The project contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service This issue was discovered and reported by GitHub team member @erik-krogh Erik...

7.5CVSS2.8AI score0.03575EPSS
SaveExploits0References11Affected Software2
osv_ghsa
osv_ghsa
•added 2021/01/13 6:21 p.m.•36 views

GHSA-JXWX-85VP-GVWM Regular Expression Denial of Service in jquery-validation

The GitHub Security Lab team has identified potential security vulnerabilities in jquery.validation. The project contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service This issue was discovered and reported by GitHub team member @erik-krogh Erik...

7.5CVSS5.9AI score0.03575EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/13 12:00 a.m.•5 views

CVE-2021-21252: Uncontrolled Resource Consumption

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

7.5CVSS5.8AI score0.03575EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2021/01/13 12:00 a.m.•3 views

@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2021-21252 via jquery-validation (>=1.14.0, <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2021-21252 Source advisory: MEND:CVE-2021-21252...

7.5CVSS0.03575EPSS
SaveExploits0
Rows per page
Query Builder