4880 matches found
ReDoS Vulnerability in ua-parser-js version
Description: A regular expression denial of service ReDoS vulnerability has been discovered in ua-parser-js. Impact: This vulnerability bypass the library's MAXLENGTH input limit prevention. By crafting a very-very-long user-agent string with specific pattern, an attacker can turn the script to g...
@alfresco/adf-testing (6.0.0-A.2-8258), @core-ui-kit/button (1.1.8) +49 more potentially affected by CVE-2022-25927 via ua-parser-js (>=0.7.30, <=0.7.32)
ua-parser-js NPM version =0.7.30, =0.1.0, =0.1.5, =0.3.367, =3.34.0, =1.106.0, =1.106.0, =7.5.0 and more Source cves: CVE-2022-25927 Source advisory: OSV:GHSA-FHG7-M89Q-25R3...
GHSA-FHG7-M89Q-25R3 ReDoS Vulnerability in ua-parser-js version
Description: A regular expression denial of service ReDoS vulnerability has been discovered in ua-parser-js. Impact: This vulnerability bypass the library's MAXLENGTH input limit prevention. By crafting a very-very-long user-agent string with specific pattern, an attacker can turn the script to g...
Regular Expression Denial Of Service (ReDoS)
mel-spintax is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists in spintax.js due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious string...
openSUSE 15 Security Update : python-mechanize (openSUSE-SU-2023:0030-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0030-1 advisory. - mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial...
@alfresco/adf-testing (6.0.0-A.2-8258), @core-ui-kit/button (1.1.8) +49 more potentially affected by CVE-2022-25927 via ua-parser-js (>=0.7.30, <=0.7.32)
ua-parser-js NPM version =0.7.30, =0.1.0, =0.1.5, =0.3.367, =3.34.0, =1.106.0, =1.106.0, =7.5.0 and more Source cves: CVE-2022-25927 Source advisory: SNYK:JS-UAPARSERJS-3244450...
Regular Expression Denial Of Service (ReDoS)
sisimai is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in the toplain function in string.rb due to inefficient regular expression complexity which leads to an application crash...
RHEL 6 / 7 : rh-python36 (RHSA-2020:4285)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4285 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high leve...
CVE-2023-24038
The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...
CVE-2023-24038
The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...
DEBIAN-CVE-2023-24038
The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...
Hardcoded credentials
The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...
CVE-2023-24038
The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...
CVE-2023-24038
CVE-2023-24038 affects the Perl module HTML-StripScripts (through version 1.06). The vulnerability is a ReDoS due to catastrophic backtracking when parsing HTML containing certain style attributes, potentially impacting availability. Affected component is html-strip-scripts logic in Perl; multipl...
CVE-2023-24038
The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...
CVE-2023-24038
The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...
CVE-2023-24038: Inefficient Regular Expression Complexity
The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...
CVE-2023-24038
The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...
Fedora 36 : yarnpkg (2023-18fd476362)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-18fd476362 advisory. Add patches for CVE-2021-43138, CVE-2022-3517, CVE-2020-7677 Tenable has extracted the preceding description block directly from the Fedora security...
