Lucene search
+L

12021 matches found

OpenVAS
OpenVAS
•added 2024/09/11 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2024:3203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.7AI score0.00817EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2024/09/11 12:00 a.m.•62 views

SUSE: Security Advisory (SUSE-SU-2024:3198-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.9AI score0.00281EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2024/09/10 4:13 a.m.•28 views

CVE-2024-45296

A flaw was found in path-to-regexp package, where it turns path strings into regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single-threaded and regex matching runs on the main thread, po...

5.3CVSS7.2AI score0.00932EPSS
SaveExploits0References6
Fedora
Fedora
•added 2024/09/10 2:54 a.m.•15 views

[SECURITY] Fedora 39 Update: firefox-130.0-3.fc39

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/09/10 12:00 a.m.•20 views

Dell Precision Rack BIOS 输入验证错误漏洞

Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products from Dell USA. The Dell Precision Rack BIOS is vulnerable to an input validation error vulnerability that originates from incorrect input validation. Exploitation of this vulnerability by a highly privileged...

6CVSS6AI score0.00144EPSS
SaveExploits0References2
Citrix
Citrix
•added 2024/09/10 12:00 a.m.•18 views

NetScaler - How to Integrate NetScaler and Exchange Server when Content Switch is Involved.

How to Integrate NetScaler and Exchange Server when Content Switch is Involved...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2024/09/10 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2024:3182-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.01686EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2024/09/10 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2024:3170-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.01565EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/09/10 12:00 a.m.•23 views

SUSE: Security Advisory (SUSE-SU-2024:3174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.6AI score0.01272EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2024/09/10 12:00 a.m.•13 views

SUSE: Security Advisory (SUSE-SU-2024:3192-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.01565EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/09/09 8:19 p.m.•175 views

path-to-regexp outputs backtracking regular expressions

Impact A bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period .. For example, /:a-:b. Patches For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0. These versions add backtrack protection...

7.5CVSS7.3AI score0.00932EPSS
SaveExploits0References10Affected Software1
osv_ghsa
osv_ghsa
•added 2024/09/09 8:19 p.m.•162 views

GHSA-9WV6-86V2-598J path-to-regexp outputs backtracking regular expressions

Impact A bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period .. For example, /:a-:b. Patches For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0. These versions add backtrack protection...

8.7CVSS6.2AI score0.00932EPSS
SaveExploits0References10
osv_azl
osv_azl
•added 2024/09/09 7:15 p.m.•15 views

AZL-49161 CVE-2024-45296 affecting package nodejs-nodemon 2.0.3-5

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event...

7.5CVSS6.7AI score0.00932EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/09/09 7:15 p.m.•15 views

AZL-49117 CVE-2024-45296 affecting package reaper for versions less than 3.1.1-13

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event...

7.5CVSS6.7AI score0.00932EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/09 7:15 p.m.•39 views

CVE-2024-45296

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event...

7.5CVSS0.00932EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/09/09 7:07 p.m.•40 views

CVE-2024-45296 path-to-regexp outputs backtracking regular expressions

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event...

7.5CVSS6.9AI score0.00616EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/09/09 7:07 p.m.•75 views

CVE-2024-45296 path-to-regexp outputs backtracking regular expressions

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event...

7.5CVSS0.00932EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2024/09/09 7:07 p.m.•41 views

CVE-2024-45296

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event...

7.5CVSS6.3AI score0.00932EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2024/09/09 12:00 a.m.•28 views

SUSE: Security Advisory (SUSE-SU-2024:3157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.04395EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2024/09/09 12:00 a.m.•26 views

SUSE: Security Advisory (SUSE-SU-2024:3162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS6.9AI score0.01257EPSS
SaveExploits0References11
Rows per page
Query Builder