Lucene search
+L

4643 matches found

Prion
Prion
added 2023/01/09 10:15 a.m.20 views

Design/Logic Flaw

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

5CVSS7.5AI score0.02046EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/09 9:33 a.m.28 views

CVE-2017-20165 debug-js debug node.js useColors redos

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

3.5CVSS6.8AI score0.02046EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2023/01/09 9:33 a.m.85 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS4.3AI score0.02046EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/01/09 9:33 a.m.39 views

CVE-2017-20165 debug-js debug node.js useColors redos

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

3.5CVSS7.7AI score0.02046EPSS
SaveExploits0References5
CVE
CVE
added 2023/01/09 9:33 a.m.125 views

CVE-2017-20165

CVE-2017-20165 affects the debug-js package (debug up to 3.0.x). The vulnerability is in the useColors function in src/node.js, where manipulating the argument str leads to inefficient regular-expression complexity (ReDoS). A fix is available in version 3.1.0, and the patch is identified as c38a0...

7.5CVSS5.5AI score0.02046EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/09 12:00 a.m.10 views

PT-2023-10617 · Debug-Js · Debug-Js

Name of the Vulnerable Software and Affected Versions: debug-js debug versions up to 3.0.x debug-js debug version 2.6.x up to 2.6.8 Description: A vulnerability has been found in debug-js debug, affecting the useColors function of the file src/node.js. The manipulation of the argument str leads t...

7.5CVSS5.6AI score0.02046EPSS
SaveExploits0References17
NVD
NVD
added 2023/01/08 11:15 a.m.32 views

CVE-2014-125068

A vulnerability was found in saxman maps-js-icoads and classified as critical. This issue affects some unknown processing of the file http-server.js. The manipulation leads to path traversal. The patch is named 34b8b0cce2807b119f4cffda2ac48fc8f427d69a. It is recommended to apply a patch to fix th...

5.5CVSS5.6AI score0.00646EPSS
SaveExploits0References3
NVD
NVD
added 2023/01/08 11:15 a.m.17 views

CVE-2014-125069

A vulnerability was found in saxman maps-js-icoads. It has been classified as problematic. Affected is an unknown function. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The name of the patch is...

5.3CVSS4.8AI score0.00732EPSS
SaveExploits0References3
Prion
Prion
added 2023/01/08 11:15 a.m.22 views

Path traversal

A vulnerability was found in saxman maps-js-icoads and classified as critical. This issue affects some unknown processing of the file http-server.js. The manipulation leads to path traversal. The patch is named 34b8b0cce2807b119f4cffda2ac48fc8f427d69a. It is recommended to apply a patch to fix th...

5.2CVSS7.2AI score0.00646EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/01/08 11:15 a.m.23 views

Design/Logic Flaw

A vulnerability was found in saxman maps-js-icoads. It has been classified as problematic. Affected is an unknown function. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The name of the patch is...

4CVSS7AI score0.00732EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/01/08 10:29 a.m.26 views

CVE-2014-125069 saxman maps-js-icoads exposure of information through directory listing

A vulnerability was found in saxman maps-js-icoads. It has been classified as problematic. Affected is an unknown function. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The name of the patch is...

4.3CVSS5.3AI score0.00732EPSS
SaveExploits0References3
CVE
CVE
added 2023/01/08 10:29 a.m.216 views

CVE-2014-125069

CVE-2014-125069 affects saxman maps-js-icoads. The vulnerability involves exposure of information through directory listings due to an issue in an unknown function, with remote feasibility. Multiple sources (NVD, Red Hat, CVE Catalog, PRION, CNNVD, PT-Security) consistently describe it as a probl...

5.3CVSS4.8AI score0.00732EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/01/08 10:28 a.m.41 views

CVE-2014-125068 saxman maps-js-icoads http-server.js path traversal

A vulnerability was found in saxman maps-js-icoads and classified as critical. This issue affects some unknown processing of the file http-server.js. The manipulation leads to path traversal. The patch is named 34b8b0cce2807b119f4cffda2ac48fc8f427d69a. It is recommended to apply a patch to fix th...

5.5CVSS5.4AI score0.00646EPSS
SaveExploits0References3
CVE
CVE
added 2023/01/08 10:28 a.m.60 views

CVE-2014-125068

The CVE-2014-125068 case affects saxman maps-js-icoads, where the issue arises from processing of http-server.js, enabling path traversal. Public sources in multiple feeds consistently describe a critical vulnerability with the patch identified as 34b8b0cce2807b119f4cffda2ac48fc8f427d69a and advi...

5.5CVSS5.4AI score0.00646EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/08 12:00 a.m.11 views

PT-2023-10139 · Saxman · Maps-Js-Icoads

Name of the Vulnerable Software and Affected Versions: saxman maps-js-icoads affected versions not specified Description: A vulnerability was found in saxman maps-js-icoads, classified as problematic. It affects an unknown function, leading to exposure of information through directory listing. Th...

5.3CVSS6.8AI score0.00732EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/01/08 12:00 a.m.7 views

maps-js-icoads 路径遍历漏洞

maps-js-icoads is a spatial and temporal data visualization of ships and buoys by the individual developer Paul R. Saxman. A security vulnerability exists in maps-js-icoads. An attacker exploited the vulnerability to expose information via directory listings...

5.3CVSS5.2AI score0.00732EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/01/08 12:00 a.m.13 views

maps-js-icoads 路径遍历漏洞

maps-js-icoads is a spatio-temporal data visualization of ships and buoys by the individual developer Paul R. Saxman. A path traversal vulnerability exists in maps-js-icoads. An attacker exploiting this vulnerability could access files and directories stored outside of the web root folder...

5.5CVSS5.7AI score0.00646EPSS
SaveExploits0References4
NVD
NVD
added 2023/01/07 7:15 p.m.26 views

CVE-2015-10028

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

6.1CVSS4.6AI score0.00548EPSS
SaveExploits0References4
Prion
Prion
added 2023/01/07 7:15 p.m.20 views

Cross site scripting

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

5.8CVSS6.7AI score0.00548EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2023/01/07 6:35 p.m.54 views

CVE-2015-10028

CVE-2015-10028 concerns the ss15-this-is-sparta project, specifically the Main Page component’s file js/roomElement.js . The available documents describe a cross-site scripting (XSS) vulnerability arising from manipulation of that file, with exploitation described as remote. The patch identified ...

6.1CVSS4.6AI score0.00548EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder