Lucene search
+L

264 matches found

SUSE CVE
SUSE CVE
added 2023/07/21 2:25 a.m.4 views

SUSE CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS8.4AI score0.00519EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/07/19 3:15 p.m.5 views

CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.3AI score0.00519EPSS
Exploits1References8
OSV
OSV
added 2023/07/19 3:15 p.m.1 views

DEBIAN-CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.1AI score0.00519EPSS
Exploits1References1
OSV
OSV
added 2023/07/19 3:15 p.m.8 views

AZL-35139 CVE-2022-40896 affecting package python-pygments for versions less than 2.4.2-1

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.4AI score0.00519EPSS
Exploits1References1
OSV
OSV
added 2023/07/19 3:15 p.m.11 views

AZL-27502 CVE-2022-40896 affecting package python-pygments for versions less than 2.4.2-1

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.4AI score0.00519EPSS
Exploits1References1
PyPA
PyPA
added 2023/07/19 3:15 p.m.8 views

PYSEC-2023-117

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS7AI score0.00519EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2023/07/19 3:15 p.m.4 views

UBUNTU-CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.4AI score0.00519EPSS
Exploits1References6
OSV
OSV
added 2023/07/19 3:15 p.m.11 views

PYSEC-2023-117

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.4AI score0.00519EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/07/19 12:0 a.m.24 views

Matthäus G. Chajdas pygments 代码问题漏洞

Matthäus G. Chajdas pygments is a Matthäus G. Chajdas open source application. It provides generic syntax highlighting tool functionality. A security vulnerability exists in pygments 2.15.0 and earlier versions, which stems from a regular expression denial of service ReDoS vulnerability in...

5.5CVSS6.2AI score0.00519EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2023/07/19 12:0 a.m.3 views

PT-2023-8449

Name of the Vulnerable Software and Affected Versions Pygments versions prior to 2.15.0 Description A ReDoS issue was discovered in pygments/lexers/smithy.py via SmithyLexer. The issue is related to the use of a regular expression with inefficient computational complexity. Exploitation of the iss...

6.8CVSS6.4AI score0.00519EPSS
Exploits1References50
RedHat Linux
RedHat Linux
added 2023/05/16 8:42 a.m.8 views

python-mako: REDoS in Lexer class

A vulnerability was found in the mako package. Affected versions of this package are vulnerable to Regular expression denial of service ReDoS attacks, affecting system availability...

7.5CVSS7.1AI score0.01718EPSS
Exploits1References5
AlmaLinux
AlmaLinux
added 2023/05/16 12:0 a.m.33 views

Moderate: python-mako security update

Mako is a template library written in Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance. Security Fixes: mako: REDoS in Lexer class CVE-2022-40023 For more details about the security issues, including the impact, a CVSS score, acknowledgment...

7.5CVSS6.7AI score0.01718EPSS
Exploits1References4
OSV
OSV
added 2023/05/10 3:15 p.m.5 views

UBUNTU-CVE-2023-31906

Jerryscript 3.0.0commit 1a2c047 was discovered to contain a heap-buffer-overflow via the component lexercompareidentifiertochars at /jerry-core/parser/js/js-lexer.c...

7.8CVSS5.8AI score0.00317EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/05/10 12:0 a.m.6 views

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0.0, which stems from the component lexercompareidentifiertochars in /jerry-core/parser/js/js-lexer.c contains a heap buffer overflow...

7.8CVSS7.6AI score0.00317EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/05/10 12:0 a.m.21 views

CVE-2023-31906

Jerryscript 3.0.0commit 1a2c047 was discovered to contain a heap-buffer-overflow via the component lexercompareidentifiertochars at /jerry-core/parser/js/js-lexer.c...

7.8AI score0.00317EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/05/10 12:0 a.m.7 views

PT-2023-23510 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0.0commit 1a2c047 Description: A heap-buffer-overflow issue was discovered in the lexer compare identifier to chars component at /jerry-core/parser/js/js-lexer.c. This issue affects the lexer functionality of the softwar...

7.8CVSS7.4AI score0.00317EPSS
Exploits1References7
CVE
CVE
added 2023/05/10 12:0 a.m.166 views

CVE-2023-31906

CVE-2023-31906 affects JerryScript 3.0.0 (commit 1a2c047). The vulnerability is a heap-buffer-overflow in the JS lexer component, specifically in lexer_compare_identifier_to_chars within /jerry-core/parser/js/js-lexer.c. According to the available documents, this yields a high-severity issue with...

7.8CVSS7.6AI score0.00317EPSS
Exploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:0 a.m.8 views

The vulnerability of the Sqlalchemy mako Python template library, related to an incorrect regular expression, allows attackers to cause service interruptions.

The vulnerability of the Sqlalchemy mako Python template library is related to insufficient input validation when processing regular expressions in the Lexer class. Exploiting this vulnerability allows a malicious actor to deliver specially crafted data to the application and execute a...

7.8CVSS7.2AI score0.01718EPSS
Exploits1References11Affected Software5
OSV
OSV
added 2023/05/10 12:0 a.m.10 views

CVE-2023-31906

Jerryscript 3.0.0commit 1a2c047 was discovered to contain a heap-buffer-overflow via the component lexercompareidentifiertochars at /jerry-core/parser/js/js-lexer.c...

7.8CVSS7.2AI score0.00317EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2023/05/09 9:52 a.m.7 views

python-mako: REDoS in Lexer class

A vulnerability was found in the mako package. Affected versions of this package are vulnerable to Regular expression denial of service ReDoS attacks, affecting system availability...

7.5CVSS7.1AI score0.01718EPSS
Exploits1References5
Rows per page
Query Builder