Lucene search
+L

8229 matches found

OSV
OSV
•added 2015/12/02 1:59 a.m.•16 views

CVE-2015-8389

PCRE before 8.38 mishandles the /?:|a|100x/ pattern and related patterns, which allows remote attackers to cause a denial of service infinite recursion or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konquero...

9.8CVSS9.7AI score
SaveExploits0References10
OSV
OSV
•added 2015/12/02 1:59 a.m.•11 views

DEBIAN-CVE-2015-8389

PCRE before 8.38 mishandles the /?:|a|100x/ pattern and related patterns, which allows remote attackers to cause a denial of service infinite recursion or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konquero...

9.8CVSS9.3AI score0.03887EPSS
SaveExploits0References1
OSV
OSV
•added 2015/12/02 1:59 a.m.•15 views

DEBIAN-CVE-2015-8386

PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp...

9.8CVSS9.3AI score0.0687EPSS
SaveExploits0References1
NVD
NVD
•added 2015/12/02 1:59 a.m.•34 views

CVE-2015-2328

PCRE before 8.36 mishandles the /?Ra|?1+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

7.5CVSS9.7AI score0.05244EPSS
SaveExploits1References10
OSV
OSV
•added 2015/12/02 1:59 a.m.•11 views

DEBIAN-CVE-2015-2328

PCRE before 8.36 mishandles the /?Ra|?1+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

7.5CVSS9.3AI score0.05244EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2015/12/02 1:00 a.m.•53 views

CVE-2015-8392

PCRE before 8.38 mishandles certain instances of the ?| substring, which allows remote attackers to cause a denial of service unintended recursion and buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

7.5CVSS7.9AI score0.03558EPSS
SaveExploits0
CNVD
CNVD
•added 2015/12/02 12:00 a.m.•11 views

PCRE Denial of Service Vulnerability (CNVD-2015-07884)

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A security vulnerability exists in PCRE versions prior to 8.38, which stems from the program's failure to properly handle the '/? :|a|100x...

9.8CVSS9.3AI score0.03887EPSS
SaveExploits0References1
Mend
Mend
•added 2015/12/02 12:00 a.m.•2 views

CVE-2015-8389

PCRE before 8.38 mishandles the /?:|a|100x/ pattern and related patterns, which allows remote attackers to cause a denial of service infinite recursion or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konquero...

9.8CVSS0.03887EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/12/02 12:00 a.m.•4 views

CVE-2015-8389: Improper Restriction of Operations within the Bounds of a Memory Buffer

PCRE before 8.38 mishandles the /?:|a|100x/ pattern and related patterns, which allows remote attackers to cause a denial of service infinite recursion or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konquero...

9.8CVSS7.8AI score0.03887EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/12/02 12:00 a.m.•4 views

CVE-2015-8392: Improper Restriction of Operations within the Bounds of a Memory Buffer

PCRE before 8.38 mishandles certain instances of the ?| substring, which allows remote attackers to cause a denial of service unintended recursion and buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

7.5CVSS7.9AI score0.03558EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2015/12/01 12:00 a.m.•41 views

CVE-2015-8392

PCRE before 8.38 mishandles certain instances of the ?| substring, which allows remote attackers to cause a denial of service unintended recursion and buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

7.5CVSS7.3AI score0.03558EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/11/19 12:00 a.m.•17 views

pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)

PCRE before 8.36 mishandles the /a\2|a\g/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a...

7.5CVSS7.4AI score0.04049EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2015/10/30 9:41 a.m.•32 views

CVE-2006-6297

Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...

5CVSS7.2AI score0.02202EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2015/10/21 12:00 a.m.•32 views

The vulnerability of the Internet Information Services software allows a perpetrator to cause service failures.

The Internet Information Services software package contains a vulnerability in the ftpsvc2.dll module, located in the C:\Windows\system32\inetsrv directory. Using this module causes exhaustion of the stack when processing a special command argument “LIST”. This occurs due to a recursive function...

2.6CVSS5.4AI score0.82265EPSS
SaveExploits10References3Affected Software1
OpenVAS
OpenVAS
•added 2015/10/13 12:00 a.m.•46 views

SUSE: Security Advisory for OpenSSL (SUSE-SU-2014:0759-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS7AI score0.95326EPSS
SaveExploits9References2
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•120 views

Oracle: Security Advisory (ELSA-2014-3107)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.0154EPSS
SaveExploits10References2
OSV
OSV
•added 2015/09/28 8:59 p.m.•14 views

CVE-2015-6806

The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...

6.3AI score
SaveExploits0References9
OSV
OSV
•added 2015/09/28 8:59 p.m.•14 views

DEBIAN-CVE-2015-6806

The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...

5CVSS7.4AI score0.04148EPSS
SaveExploits1References1
NVD
NVD
•added 2015/09/28 8:59 p.m.•26 views

CVE-2015-6806

The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...

5CVSS6.3AI score0.04148EPSS
SaveExploits1References8
Debian CVE
Debian CVE
•added 2015/09/28 8:00 p.m.•81 views

CVE-2015-6806

The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...

5CVSS6.2AI score0.04148EPSS
SaveExploits1
Rows per page
Query Builder