Design/Logic Flaw

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...

CVE-2021-23490

CVE-2021-23490 affects the npm package parse-link-header . The issue is a Regular Expression Denial of Service (ReDoS) triggered by the checkHeader function in versions prior to 2.0.0 . Reported impact is CPU exhaustion that can degrade service or cause a denial of service. Remediation : upgrade ...

CVE-2021-23490

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...

CVE-2021-23490

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...

PT-2021-15535 · Unknown · Parse-Link-Header

Name of the Vulnerable Software and Affected Versions: parse-link-header versions prior to 2.0.0 Description: The issue concerns a Regular Expression Denial of Service ReDoS that can be triggered via the checkHeader function. This can lead to a denial of service. Recommendations: For versions pri...

parse-link-header 安全漏洞

parse-link-header parses the link header and returns paging information for each contained link. A security vulnerability exists in parse-link-header version 2.0.0 and earlier, which stems from the checkHeader function being vulnerable to a regular expression denial of service attack...

CVE-2021-23490: Inefficient Regular Expression Complexity

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...

Cross-site Scripting (XSS)

ajaxnetprofessional is vulnerable to cross-site scripting attacks. The vulnerability exists due to lack of input validation in parse function of AjaxPro/core.js in when parsing json input which allows a malicious attacker to inject and execute arbitrary javascript...

PT-2021-27972

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3...

UBUNTU-CVE-2021-44921

A null pointer dereference vulnerability exists in gpac 1.1.0 in the gfisomparsemovieboxesinternal function, which causes a segmentation fault and application crash...

PT-2021-24174

Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0 Description: A null pointer dereference issue exists in the gf isom parse movie boxes internal function, causing a segmentation fault and application crash. Recommendations: For gpac version 1.1.0, consider avoiding the use...

Command Injection in parse-community/parse-server

Description This is a Remote Code Execution vulnerability in the Parse Server. This vulnerability affects the Parse Server in the default configuration with MongoDB, probably a similar attack can affect the PostgreSQL storage as well. The main weakness that leads to RCE is the Prototype Pollution...

Regular Expression Denial of Service (ReDoS)

Overview parse-link-header is a package that parses a link header and returns paging information for each contained link. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function. PoC var parse = require'parse-link-header'; const...

nodejs-ini: Prototype pollution via malicious INI file

A flaw was found in nodejs-ini. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context...

An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c which will lead to a denial of service attack.

...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to a double free vulnerability in the pyc parse which allows an attacker to crash the application via malicious input...

PT-2021-8238

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the mac80211 component of the Linux kernel, which is associated with improper input validation in the ieee802 11 parse elems crc function. This can allow an...

Rizin 缓冲区错误漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a command-line hex editor that can open disk files that can be scripted, etc. Rizin 0.3.1 and earlier versions have a...

PT-2021-27930

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A heap buffer overflow read issue is identified, associated with a crash type. The crash state involves functions such as find sdp line delimiter, parse mixed content, and parse sdp. No...

PT-2021-27916

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the smtp parse...