Lucene search
+L

1077 matches found

vulnersOsv
vulnersOsv
•added 2021/07/20 5:33 p.m.•7 views

@acaciomartins/react-native-simpletable (>=0.0.1, <=0.0.2), @alan-ai/alan-sdk-react-native (>=1.0.4, <=1.0.7) +1205 more potentially affected by CVE-2020-1920 via react-native (>=0.59.0, <=0.62.2)

react-native NPM version =0.59.0, =0.0.1, =1.0.4, =1.0.0-rn-83, =2.3.3, =3.1.0-rn-83, =2.0.1, =2.0.1758683737, =2.1.87, =1.0.1767254401, =1.1.3, =1.3.0, =0.1.0, =0.4.0 and more Source cves: CVE-2020-1920 Source advisory: OSV:GHSA-7F53-FMMV-MFJV...

7.5CVSS7.2AI score0.01363EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/07/20 5:33 p.m.•3 views

@acaciomartins/react-native-simpletable (>=0.0.1, <=0.0.2), @alan-ai/alan-sdk-react-native (>=1.0.4, <=1.0.7) +1205 more potentially affected by CVE-2020-1920 via react-native (>=0.59.0, <=0.62.2)

react-native NPM version =0.59.0, =0.0.1, =1.0.4, =1.0.0-rn-83, =2.3.3, =3.1.0-rn-83, =2.0.1, =2.0.1758683737, =2.1.87, =1.0.1767254401, =1.1.3, =1.3.0, =0.1.0, =0.4.0 and more Source cves: CVE-2020-1920 Source advisory: GHSA-7F53-FMMV-MFJV...

7.5CVSS0.01363EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/07/20 5:33 p.m.•2 views

@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @abdur-rakib/react-native-button (>=0.0.1, <=0.0.3) +625 more potentially affected by CVE-2020-1920 via react-native (>=0.63.0, <=0.64.0)

react-native NPM version =0.63.0, =0.1.0, =0.0.1, =0.1.0, =2.5.0, =0.0.1, =1.0.0, =1.0.1-Alpha.0, =1.1.4, =1.0.0, =1.0.4, =1.0.3, =3.0.0, =1.2.1, =1.0.0, =1.0.3 and more Source cves: CVE-2020-1920 Source advisory: GHSA-7F53-FMMV-MFJV...

7.5CVSS0.01363EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/07/20 5:33 p.m.•3 views

@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @abdur-rakib/react-native-button (>=0.0.1, <=0.0.3) +625 more potentially affected by CVE-2020-1920 via react-native (>=0.63.0, <=0.64.0)

react-native NPM version =0.63.0, =0.1.0, =0.0.1, =0.1.0, =2.5.0, =0.0.1, =1.0.0, =1.0.1-Alpha.0, =1.1.4, =1.0.0, =1.0.4, =1.0.3, =3.0.0, =1.2.1, =1.0.0, =1.0.3 and more Source cves: CVE-2020-1920 Source advisory: OSV:GHSA-7F53-FMMV-MFJV...

7.5CVSS0.01363EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2021/07/20 5:33 p.m.•132 views

Regular expression denial of service in react-native

A regular expression denial of service ReDoS vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1...

7.5CVSS7.1AI score0.01363EPSS
SaveExploits0References7Affected Software1
osv_cve
osv_cve
•added 2021/06/15 10:15 p.m.•52 views

CVE-2021-24037

A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of...

9.8CVSS7.8AI score
SaveExploits0References2
Prion
Prion
•added 2021/06/15 10:15 p.m.•37 views

Design/Logic Flaw

A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of...

7.5CVSS9.9AI score0.01795EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/06/15 10:15 p.m.•12 views

CVE-2021-24037

A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of...

9.8CVSS7.6AI score0.01795EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/06/15 10:00 p.m.•71 views

CVE-2021-24037

A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of...

10AI score0.01795EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/15 12:00 a.m.•6 views

CVE-2021-24037: Use After Free

A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of...

9.8CVSS6.8AI score0.01795EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2021/06/01 2:15 p.m.•39 views

CVE-2020-1920

A regular expression denial of service ReDoS vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1...

7.5CVSS6.8AI score
SaveExploits0References2
NVD
NVD
•added 2021/06/01 2:15 p.m.•38 views

CVE-2020-1920

A regular expression denial of service ReDoS vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1...

7.5CVSS0.01363EPSS
SaveExploits0References2
Prion
Prion
•added 2021/06/01 2:15 p.m.•32 views

Denial of service

A regular expression denial of service ReDoS vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1...

5CVSS7.4AI score0.01363EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/06/01 11:45 a.m.•52 views

CVE-2020-1920

A regular expression denial of service ReDoS vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1...

7.4AI score0.01363EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/01 11:45 a.m.•109 views

CVE-2020-1920

Summary of CVE-2020-1920 (CVE entry mode C) The issue is a ReDoS vulnerability in react-native's validateBaseUrl function . It affects react-native versions from 0.59.0 through 0.64.1 , where crafting a URL can cause the application to consume excessive resources, become unresponsive, or crash. T...

7.5CVSS7.4AI score0.01363EPSS
SaveExploits0References2Affected Software1
vulnersOsv
vulnersOsv
•added 2021/06/01 11:45 a.m.•2 views

@acaciomartins/react-native-simpletable (>=0.0.1, <=0.0.2), @alan-ai/alan-sdk-react-native (>=1.0.4, <=1.0.7) +1205 more potentially affected by CVE-2020-1920 via react-native (>=0.59.0, <=0.62.2)

react-native NPM version =0.59.0, =0.0.1, =1.0.4, =1.0.0-rn-83, =2.3.3, =3.1.0-rn-83, =2.0.1, =2.0.1758683737, =2.1.87, =1.0.1767254401, =1.1.3, =1.3.0, =0.1.0, =0.4.0 and more Source cves: CVE-2020-1920 Source advisory: MEND:CVE-2020-1920...

7.5CVSS0.01363EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/06/01 11:45 a.m.•3 views

@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @abdur-rakib/react-native-button (>=0.0.1, <=0.0.3) +625 more potentially affected by CVE-2020-1920 via react-native (>=0.63.0, <=0.64.0)

react-native NPM version =0.63.0, =0.1.0, =0.0.1, =0.1.0, =2.5.0, =0.0.1, =1.0.0, =1.0.1-Alpha.0, =1.1.4, =1.0.0, =1.0.4, =1.0.3, =3.0.0, =1.2.1, =1.0.0, =1.0.3 and more Source cves: CVE-2020-1920 Source advisory: MEND:CVE-2020-1920...

7.5CVSS0.01363EPSS
SaveExploits0
Mend
Mend
•added 2021/06/01 11:45 a.m.•13 views

CVE-2020-1920

A regular expression denial of service ReDoS vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1...

8.7CVSS0.01363EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/06/01 12:00 a.m.•23 views

React Native code issues and vulnerabilities

React Native is an open source JavaScript framework. It is used to build user interfaces and native applications. A code issue vulnerability exists in react-native version 0.59.0, which stems from a regular expression in the validateBaseUrl function that could cause an application to use too many...

7.5CVSS7.4AI score0.01363EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/01 12:00 a.m.•10 views

CVE-2020-1920: Inefficient Regular Expression Complexity

A regular expression denial of service ReDoS vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1...

7.5CVSS5.8AI score0.01363EPSS
SaveExploits0References3
Rows per page
Query Builder