Lucene search
+L

469 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/12 12:00 a.m.•9 views

CVE-2023-27704: Inefficient Regular Expression Complexity

Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service ReDoS...

5.5CVSS5.7AI score0.0037EPSS
SaveExploits0References3
NVD
NVD
•added 2023/02/12 9:15 p.m.•42 views

CVE-2020-36661

A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function isheader of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this...

7.5CVSS5AI score0.0092EPSS
SaveExploits0References5
Mend
Mend
•added 2023/02/12 8:31 p.m.•8 views

CVE-2020-36661

A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function isheader of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this...

7.5CVSS0.0092EPSS
SaveExploits0References5
Mend
Mend
•added 2023/02/12 2:31 p.m.•7 views

CVE-2019-25103

A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file simple-markdown.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely. Upgrading to...

7.5CVSS0.0094EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/12 12:00 a.m.•5 views

CVE-2019-25102: Inefficient Regular Expression Complexity

A vulnerability, which was classified as problematic, was found in simple-markdown 0.6.0. Affected is an unknown function of the file simple-markdown.js. The manipulation with the input :/:/:/:/:/:/:/:/:/:/ leads to inefficient regular expression complexity. It is possible to launch the attack...

7.5CVSS5.1AI score0.01097EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/12 12:00 a.m.•5 views

CVE-2019-25103: Inefficient Regular Expression Complexity

A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file simple-markdown.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely. Upgrading to...

7.5CVSS5.1AI score0.0094EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/12 12:00 a.m.•9 views

CVE-2020-36661: Inefficient Regular Expression Complexity

A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function isheader of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this...

7.5CVSS5.1AI score0.0092EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/02/12 12:00 a.m.•19 views

simple-markdown security vulnerabilities

Khan Academy simple-markdown is a Markdown parser. A security vulnerability exists in simple-markdown version 0.5.1. An attacker has exploited the vulnerability to reduce regular expression complexity...

7.5CVSS5.6AI score0.0094EPSS
SaveExploits0References5
osv_ghsa
osv_ghsa
•added 2023/02/11 12:13 a.m.•26 views

GHSA-8X6C-CV3V-VP6G Withdrawn: cacheable-request depends on http-cache-semantics, which is vulnerable to Regular Expression Denial of Service

This advisory is withdawn. cacheable-request depends on http-cache-semanttics, which contains an Inefficient Regular Expression Complexity in versions prior to 4.1.1 of that package. cacheable-request has been updated to rely on the fixed version in 10.2.7. Summary of http-cache-semantics...

7.5CVSS6.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2023/02/04 6:30 a.m.•243 views

is-url Inefficient Regular Expression Complexity vulnerability

A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is an unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Upgrading to version 1.2....

7.5CVSS3.6AI score0.00951EPSS
SaveExploits0References7Affected Software1
Prion
Prion
•added 2023/02/04 4:15 a.m.•21 views

Information disclosure

A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Upgrading to version...

5CVSS7.5AI score0.00951EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2023/02/04 3:57 a.m.•37 views

CVE-2018-25079 Segmentio is-url index.js redos

A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Upgrading to version...

4.3CVSS7.5AI score0.00951EPSS
SaveExploits0References5
Mend
Mend
•added 2023/02/04 3:57 a.m.•6 views

CVE-2018-25079

A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Upgrading to version...

7.5CVSS0.00951EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/04 12:00 a.m.•6 views

CVE-2018-25079: Inefficient Regular Expression Complexity

A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Upgrading to version...

7.5CVSS5AI score0.00951EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/31 12:00 a.m.•4 views

CVE-2022-25881: Inefficient Regular Expression Complexity

This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library...

7.5CVSS7.2AI score0.01613EPSS
SaveExploits1References4
Veracode
Veracode
•added 2023/01/20 7:32 a.m.•45 views

Regular Expression Denial Of Service (ReDoS)

papapars is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists in papaparse.js due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious string...

7.5CVSS7.1AI score0.01428EPSS
SaveExploits1References8Affected Software2
Github Security Blog
Github Security Blog
•added 2023/01/18 3:31 a.m.•48 views

mel-spintax has Inefficient Regular Expression Complexity

A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spintax.js. The manipulation of the argument text leads to inefficient regular expression complexity. The name of the patch is...

7.5CVSS3.4AI score0.00882EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2023/01/18 3:31 a.m.•65 views

GHSA-QJM7-55VV-3C5F mel-spintax has Inefficient Regular Expression Complexity

A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spintax.js. The manipulation of the argument text leads to inefficient regular expression complexity. The name of the patch is...

4.3CVSS7.5AI score0.00882EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2023/01/18 1:15 a.m.•29 views

CVE-2018-25077

A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spintax.js. The manipulation of the argument text leads to inefficient regular expression complexity. The name of the patch is...

7.5CVSS7.6AI score
SaveExploits0References3
Mend
Mend
•added 2023/01/18 12:58 a.m.•7 views

CVE-2018-25077

A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spintax.js. The manipulation of the argument text leads to inefficient regular expression complexity. The name of the patch is...

7.5CVSS0.00882EPSS
SaveExploits0References5
Rows per page
Query Builder