Lucene search
+L

8988 matches found

CVE
CVE
•added 2025/01/15 12:00 a.m.•80 views

CVE-2024-36751

The parse-uri library (version 1.0.9 ) is vulnerable to a Regular expression Denial of Service (ReDoS) . This vulnerability occurs because of inefficient regular expression processing , which allows an attacker to provide a crafted URL that triggers excessive backtracking, leading to a denial of ...

6.5CVSS6.4AI score0.00522EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/15 12:00 a.m.•18 views

parse-uri 安全漏洞

parse-uri is a lightweight module for parsing URIs from the individual developers at Kiko Beats. A security vulnerability exists in parse-uri v1.0.9. An attacker can exploit this vulnerability to trigger a regular expression denial of service via a crafted URL...

6.5CVSS6.4AI score0.00522EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/15 12:00 a.m.•28 views

CVE-2024-36751

An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...

0.00522EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/15 12:00 a.m.•18 views

PT-2025-2456 · Parse-Uri · Parse-Uri

Name of the Vulnerable Software and Affected Versions: parse-uri version 1.0.9 Description: The issue allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL. This can be achieved by manipulating the URL in a way that triggers a denial of service. Recommendations:...

6.9CVSS6.8AI score0.00522EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/01/15 12:00 a.m.•10 views

CVE-2024-36751

An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...

6.3AI score0.00522EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/01/14 12:00 a.m.•34 views

EulerOS 2.0 SP9 : xmlrpc-c (EulerOS-SA-2025-1067)

According to the versions of the xmlrpc-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer.CVE-2024-45490 An issue was...

9.8CVSS7.1AI score0.01686EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•3 views

PT-2025-8995

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the rcar-ep PCI module. The rcar pcie parse outbound ranges function uses the devm request mem region macro to...

7.8CVSS0.00205EPSS
SaveExploits0
OSV
OSV
•added 2025/01/10 1:15 p.m.•2 views

DEBIAN-CVE-2024-57822

In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptorntriplesparseterminternal...

5.5CVSS5.1AI score0.00292EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/10 1:15 p.m.•18 views

UBUNTU-CVE-2024-57822

In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptorntriplesparseterminternal...

5.5CVSS6AI score0.00292EPSS
SaveExploits1References5
OSV
OSV
•added 2025/01/09 4:31 p.m.•16 views

USN-7197-1 golang-golang-x-net vulnerability

Guido Vranken discovered that Go Networking handled input to the Parse functions inefficiently. An attacker could possibly use this issue to cause denial of service. This update addresses the issue in the golang-golang-x-net and golang-golang-x-net-dev packages, as well as the library vendored...

5.3CVSS6.7AI score0.00868EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/01/07 3:48 a.m.•14 views

SUSE CVE-2024-56763

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracingcpumaskwrite If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it...

5.5CVSS7.7AI score0.00207EPSS
SaveExploits0References14
OSV
OSV
•added 2025/01/06 5:15 p.m.•7 views

DEBIAN-CVE-2024-56763

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracingcpumaskwrite If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it...

5.5CVSS5.7AI score0.00207EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/06 5:15 p.m.•12 views

UBUNTU-CVE-2024-56763

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracingcpumaskwrite If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it...

5.5CVSS6.2AI score0.00207EPSS
SaveExploits0References36
CNNVD
CNNVD
•added 2025/01/06 12:00 a.m.•20 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates in the tracing module that triggers a warning in bitmapparseuser when a large count value is supplied and there ...

5.5CVSS6.5AI score0.00207EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/01/04 12:00 a.m.•19 views

The vulnerability of the cn_update() function in the _all_edits.php script (/_parse/_all_edits.php) of the Job Recruitment system allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the cnupdate function in the alledits.php /parse/alledits.php personnel recruitment system is related to the failure to take measures to neutralize special elements when processing parameters urle and cname. Exploiting this vulnerability can allow an attacker, operating...

7.5CVSS7.6AI score0.00643EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/04 12:00 a.m.•19 views

The vulnerability of the fln_update() function in the _all_edits.php (/_parse/_all_edits.php) script of the Job Recruitment system allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the flnupdate function in the alledits.php /parse/alledits.php personnel recruitment system is related to the failure to take measures to neutralize special elements when processing the parameters fname and lname. Exploiting this vulnerability can allow an intruder to gain...

7.5CVSS7.6AI score0.00643EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•15 views

PT-2025-32541 · Unknown +1 · Nasm Netwide Assembler +1

Name of the Vulnerable Software and Affected Versions: NASM Netwide Assembler version 2.17rc0 Description: A stack-based buffer overflow exists in the parse line function within the parser.c file. The issue is locally exploitable and has been publicly disclosed. Recommendations: At the moment,...

5.3CVSS5.2AI score0.00288EPSS
SaveExploits1References18
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•20 views

PT-2026-3089

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A heap overflow exists in the uncv parse config function. This issue can be triggered by processing a specially crafted MP4 file, potentially leading to a Denial of Service DoS. Recommendations Update to a newer...

5.5CVSS6.8AI score0.00214EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•13 views

PT-2025-32538 · Unknown +1 · Nasm Netwide Assembler +1

Name of the Vulnerable Software and Affected Versions: NASM Netwide Assembler version 2.17rc0 Description: A flaw exists in the parse smacro template function within the preproc.c file. This issue leads to a null pointer dereference. Local access is required for exploitation. An exploit has been...

4.8CVSS3.4AI score0.00266EPSS
SaveExploits1References19
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•13 views

PT-2026-3064

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description The software contains an out-of-bounds read issue in the oggdmx parse tags function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

8.5CVSS6.5AI score0.00428EPSS
SaveExploits1References7
Rows per page
Query Builder