cve-search 安全漏洞

Cve-Search is a tool that performs local searches for known vulnerabilities. It is used for searching, indexing, correlating and managing software vulnerabilities. cve-search versions prior to 4.1.0 have a security vulnerability that stems from lib/DatabaseLayer.py allowing regular expression...

jsx-slack 安全漏洞

jsx-slack builds JSON objects from JSX for the Slack block suite surface. A security vulnerability exists in jsx-slack, which stems from the fact that the CVE-2021-43838 patch is not sufficient to prevent regular expressions in the CNNVD-202112-2019 tag, then regular expressions used internally t...

CVE-2021-43838

jsx-slack is a library for building JSON objects for Slack Block Kit surfaces from JSX. In versions prior to 4.5.1 users are vulnerable to a regular expression denial-of-service ReDoS attack. If attacker can put a lot of JSX elements into tag, an internal regular expression for escaping character...

USN-5200-1 python3.7, python3.8 vulnerabilities

It was discovered that the urllib.request.AbstractBasicAuthHandler class in Python contains regex allowing for catastrophic backtracking. Specially crafted traffic from a malicious HTTP server could cause a regular expression denial of service ReDoS condition for a client. CVE-2020-8492 It was...

USN-5199-1 python3.6 vulnerabilities

It was discovered that the urllib.request.AbstractBasicAuthHandler class in Python contains regex with a quadratic worst-case time complexity. Specially crafted traffic from a malicious HTTP server could cause a regular expression denial of service ReDoS condition for a client. CVE-2021-3733 It w...

jsx-slack 安全漏洞

jsx-slack builds JSON objects from JSX for the Slack block suite surface. A security vulnerability exists in jsx-slack that stems from the software's lack of effective processing and filtering of regular expressions, which makes users susceptible to Regular Expression Denial of Service ReDoS...

CVE-2021-37262

JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...

CVE-2021-37262

JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...

CVE-2021-37262

JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...

Design/Logic Flaw

JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...

CVE-2021-37262

CVE-2021-37262 affects JFinal_cms 5.1.0. The vulnerability is a regex injection in handling user input, leading to Denial of Service. Multiple connected sources confirm the app/framework context and the nature of the issue, but no concrete exploit details or official fix/version remediation are p...

CVE-2021-37262

JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...

Oracle Linux 8 : nodejs:16 (ELSA-2021-5171)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-5171 advisory. - Resolves CVE-2020-28469 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

JFinal 注入漏洞

JFinal is a Java language based WEB ORM open source framework. jFinal cms in versions prior to 5.1.0 there is a denial of service vulnerability , the vulnerability stems from the application of regular expressions on the insecure handling of user input , the attacker can use the vulnerability...

cbioportal 安全漏洞

CbioPortal is used to provide visualization, analysis, and download of large-scale cancer genomics datasets. a denial-of-service vulnerability exists in CbioPortal in versions 3.6.21 and earlier, which stems from the insecure handling of regular expressions in /ProteinArraySignificanceTest.json,...

RLSA-2021:5171 Moderate: nodejs:16 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 16.13.1, nodejs-nodemon 2.0.15. BZ2027610 Security Fixes: nodejs-json-schema:...

CVE-2021-39940

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. GitLab Maven Package registry is vulnerable to a regular expression denial of service when a...

CVE-2021-39933

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. A regular expression used for handling user input notes, comments, etc was susceptible to catastroph...

CVE-2021-39940

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. GitLab Maven Package registry is vulnerable to a regular expression denial of service when a...

CVE-2021-39938

A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to cause uncontrolled resource consumption leading to Denial of Service via specially crafted...