Lucene search
K

38 matches found

Vulnrichment
Vulnrichment
added 2026/04/05 8:45 p.m.0 views

CVE-2019-25661 Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS

Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...

6.9CVSS6.2AI score0.00017EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.1 views

CVE-2026-20639

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously crafted string may lead to heap corruption...

7.5CVSS5.8AI score0.0006EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.0 views

PT-2026-27532

Name of the Vulnerable Software and Affected Versions macOS Sequoia version 15.7.5 macOS Sonoma version 14.8.5 macOS Tahoe version 26.3 Description An integer overflow issue existed due to inadequate input validation. Processing a specially crafted string could result in heap corruption...

7.8CVSS5.8AI score0.0006EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-2126

Malware in sbrugna...

7.5CVSS7.6AI score0.00574EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-0364

Malware in sbrugna...

7.8CVSS7.7AI score0.01523EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-29279

Malicious code in bioql PyPI...

5.5CVSS6.3AI score0.00019EPSS
Exploits0References4
NVD
NVD
added 2025/09/15 11:15 p.m.3 views

CVE-2025-43353

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. Processing a maliciously crafted string may lead to heap corruption...

5.5CVSS0.00019EPSS
Exploits0References6
Veracode
Veracode
added 2023/01/24 4:53 a.m.35 views

Regular Expression Denial Of Service (ReDoS)

cookiejar is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists in the parse function of cookiejar.js due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious string...

7.5CVSS7.3AI score0.00074EPSS
Exploits1References6Affected Software2
Veracode
Veracode
added 2023/01/20 7:32 a.m.30 views

Regular Expression Denial Of Service (ReDoS)

papapars is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists in papaparse.js due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious string...

7.5CVSS7.1AI score0.00427EPSS
Exploits1References8Affected Software2
Veracode
Veracode
added 2022/09/08 7:24 a.m.32 views

Denial Of Service (DoS)

github.com/helm/helm is vulnerable to denial of service DoS attacks. A remote authenticated attacker is able to cause an out of memory panic by supplying malicious string inputs to functions in the strvals package, resulting in denial of service conditions...

6.5CVSS6.5AI score0.00089EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2022/08/11 7:4 a.m.14 views

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow allowing an attacker to crash the system by passing in a maliciously crafted string constant...

7.8CVSS7.6AI score0.00043EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2021/11/03 10:11 a.m.15 views

CVE-2021-40848

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection...

8.6AI score0.00449EPSS
Exploits0References2
Veracode
Veracode
added 2021/09/20 6:48 a.m.78 views

Regular Expression Denial Of Service (ReDoS)

nth-check is vulnerable to regular expression denial of service. The vulnerability exists due to inefficient regular expression complexity in parse.ts, which may crash the system when parsing a malicious string...

7.5CVSS7.2AI score0.00166EPSS
Exploits1References4Affected Software2
Veracode
Veracode
added 2021/09/16 4:0 a.m.13 views

Regular Expression Denial Of Service (ReDoS)

semver-regex is vulnerable to regular expression denial of service. An attacker is able to crash the application by submitting a malicious string to the function semverRegex...

7.5CVSS3.3AI score0.00468EPSS
Exploits1References2Affected Software1
Veracode
Veracode
added 2021/09/14 4:31 a.m.11 views

Regular Expression Denial Of Service (ReDoS)

servicestack is vulnerable to regular expression denial of service. An attacker is able to crash the application by submitting a malicious string through block.html...

3.7AI score
Exploits0
Veracode
Veracode
added 2021/09/09 8:25 a.m.4 views

Regular Expression Denial Of Service(ReDoS)

flaskrestx is vulnerable to regular expression denial of service. The use of emailregex allows an attacker to send malicious string to cause excessive processing of regex engine...

7.5CVSS6.5AI score0.01367EPSS
Exploits0References9Affected Software1
Github Security Blog
Github Security Blog
added 2021/09/02 5:15 p.m.522 views

Uncontrolled Resource Consumption in ansi-html

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

7.5CVSS5.4AI score0.00574EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2021/08/18 5:15 p.m.9 views

CVE-2021-23424

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

7.5CVSS0.00574EPSS
Exploits1References3
Prion
Prion
added 2021/08/18 5:15 p.m.11 views

Input validation

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

5CVSS7.5AI score0.00574EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2021/08/18 12:0 a.m.2 views

ansi-html安全漏洞

ansi-html is an elegant library for NPM that converts chalk ANSI text to HTML. A security vulnerability exists in ansi-html 0.0.7 and earlier versions, if an attacker exploits this vulnerability by supplying a malicious string, the program will be stuck and unable to process input for an extended...

7.5CVSS7.4AI score0.00574EPSS
Exploits1References3
Rows per page
Query Builder