Lucene search
+L

378 matches found

Tenable Nessus
Tenable Nessus
added 2024/12/20 12:0 a.m.16 views

Atlassian Confluence 7.19.x < 7.19.29 / 7.20.x < 8.5.17 / 8.6.x < 8.9.8 / 9.0.x < 9.1.0 / 9.2.0 (CONFSERVER-98300)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-98300 advisory. - A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand...

7.5CVSS7.5AI score0.01674EPSS
Exploits0References2
OSV
OSV
added 2024/09/13 12:27 p.m.16 views

RHSA-2016:1583 Red Hat Security Advisory: rh-nodejs4-nodejs-minimatch security update

Bulletin has no description...

5.3CVSS8.9AI score
Exploits0References8
OSV
OSV
added 2024/09/13 12:27 p.m.17 views

RHSA-2016:1582 Red Hat Security Advisory: nodejs010-nodejs-minimatch security update

Bulletin has no description...

5.3CVSS8.9AI score
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2024/07/12 12:0 a.m.29 views

RHEL 9 : pcs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - loader-utils: prototype pollution in function parseQuery in parseQuery.js CVE-2022-37601 - A vulnerabilit...

9.8CVSS9.4AI score0.02601EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.27 views

RHEL 6 : nodejs-minimatch (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-3517 Note that Nessus has not tested for this issue b...

8.8AI score0.01674EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.28 views

RHEL 7 : nodejs-minimatch (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-3517 Note that Nessus has not tested for this issue b...

8.8AI score0.01674EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.31 views

Rocky Linux 9 : nodejs:18 (RLSA-2022:8832)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8832 advisory. - A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand functio...

8.1CVSS7AI score0.14024EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/10/31 2:23 a.m.4 views

SUSE CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS8.1AI score0.01674EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.36 views

Ubuntu 16.04 ESM : minimatch vulnerability (USN-4783-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-4783-1 advisory. It was discovered that minimatch did not perform necessary bounds checking on regular expressions. An attacker could use this vulnerability to cause a denial of...

7.5CVSS7.5AI score0.01743EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:0 a.m.7 views

The vulnerability of the minimatch library on the Node.js software platform allows a attacker to perform a type of attack known as “denial-of-service attack”.

The vulnerability of the minimatch library on the Node.js software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a remote attacker to execute a “denial-of-service” attack using regular expressions...

7.8CVSS7AI score0.01674EPSS
Exploits0References7Affected Software5
OpenVAS
OpenVAS
added 2023/05/19 12:0 a.m.29 views

Ubuntu: Security Advisory (USN-6086-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.8AI score0.01674EPSS
Exploits0References2
OSV
OSV
added 2023/05/18 8:22 a.m.6 views

USN-6086-1 node-minimatch vulnerability

It was discovered that minimatch incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service...

7.5CVSS7AI score0.01674EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2023/05/18 8:22 a.m.79 views

USN-6086-1: minimatch vulnerability

It was discovered that minimatch incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service...

7.5CVSS7.6AI score0.01674EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/05/18 12:0 a.m.43 views

Ubuntu 18.04 LTS / 20.04 LTS : minimatch vulnerability (USN-6086-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6086-1 advisory. It was discovered that minimatch incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted...

7.5CVSS7.5AI score0.01674EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/15 6:43 p.m.17 views

Security Bulletin: Open Source Dependency Vulnerability

Summary IBM Edge Application Manager 4.5 has resolved the vulnerability. Vulnerability Details CVEID:CVE-2022-3517 DESCRIPTION: minimatch is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw in the braceExpand function. By sending specially-crafted reg...

7.5CVSS8.2AI score0.01674EPSS
Exploits0Affected Software1
Redos
Redos
added 2023/05/05 12:0 a.m.34 views

ROS-20230504-03

A vulnerability in the minimatch package of the Node.js software development platform is related to a call to the braceExpand function with with certain arguments. Exploitation of the vulnerability could allow an attacker acting remotely, to cause a denial of service...

7.5CVSS7.8AI score0.01674EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/04/13 12:0 a.m.45 views

CentOS 8 : nodejs:14 (CESA-2023:1743)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:1743 advisory. - The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...

8.6CVSS7AI score0.24928EPSS
Exploits4References8
RedHat Linux
RedHat Linux
added 2023/04/12 3:4 p.m.5 views

nodejs-minimatch: ReDoS via the braceExpand function

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.1AI score0.01674EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/04/12 3:3 p.m.3 views

nodejs-minimatch: ReDoS via the braceExpand function

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.1AI score0.01674EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/03/30 1:6 p.m.8 views

nodejs-minimatch: ReDoS via the braceExpand function

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.1AI score0.01674EPSS
Exploits0References4
Rows per page
Query Builder