Lucene search
+L

8130 matches found

Github Security Blog
Github Security Blog
•added 2023/01/11 6:30 a.m.•24 views

Duplicate of GHSA-4xh4-v2pq-jvhm

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4xh4-v2pq-jvhm. This link is maintained to preserve external references. Original Description The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the...

5.3CVSS2.1AI score0.00489EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/11 12:00 a.m.•8 views

CVE-2023-22963

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^0000-9$ regular expression...

5.3AI score0.00489EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/01/11 12:00 a.m.•23 views

CVE-2023-22963

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^0000-9$ regular expression...

5.3CVSS5.4AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/11 12:00 a.m.•15 views

Dart 输入验证错误漏洞

Dart is an open source programming language. A security vulnerability exists in versions prior to Dart 3.0.3, which stems from personnummer incorrectly handling the last four digits of a number that matches a ^0000-9$ regular expression...

5.3CVSS5.7AI score0.00489EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/01/11 12:00 a.m.•45 views

CVE-2023-22963

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^0000-9$ regular expression...

5.6AI score0.00489EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/11 12:00 a.m.•19 views

Prestaul skeemas 安全漏洞

Prestaul skeemas is a comprehensive validation of JSON schemas drafts 3 and 4. A security vulnerability exists in Prestaul skeemas, which stems from the fact that incorrect manipulation of the parameter uri can lead to inefficient regular expression complexity...

7.5CVSS5.5AI score0.00918EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/11 12:00 a.m.•6 views

CVE-2018-25074: Inefficient Regular Expression Complexity

A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The patch is named...

7.5CVSS5.2AI score0.00918EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/11 12:00 a.m.•4 views

CVE-2020-36649: Inefficient Regular Expression Complexity

A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file papaparse.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 5.2.0 is able to address this issue. The name of the...

7.5CVSS5AI score0.01388EPSS
SaveExploits1References2
Veracode
Veracode
•added 2023/01/10 7:04 a.m.•70 views

Regular Expression Denial Of Service

debug is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists in useColors function of node.js due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious string...

7.5CVSS7.1AI score0.02046EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/01/10 12:00 a.m.•136 views

AlmaLinux 8 : nodejs:14 (ALSA-2023:0050)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0050 advisory. minimist: prototype pollution CVE-2021-44906 node-fetch: exposure of sensitive information to an unauthorized actor CVE-2022-0235 nodejs-minimatch: ReDoS...

9.8CVSS7.1AI score0.15622EPSS
SaveExploits4References6
Github Security Blog
Github Security Blog
•added 2023/01/09 2:10 p.m.•62 views

Luxon Inefficient Regular Expression Complexity vulnerability

Impact Luxon's DateTime.fromRFC2822 has quadratic N^2 complexity on some specific inputs. This causes a noticeable slowdown for inputs with lengths above 10k characters. Users providing untrusted data to this method are therefore vulnerable to ReDoS attacks. This is the same bug as Moment's...

7.5CVSS7.5AI score0.01785EPSS
SaveExploits0References8Affected Software1
vulnersOsv
vulnersOsv
•added 2023/01/09 12:30 p.m.•9 views

0.8.18-p11 (0.8.18-p12), 04_nodeblog (1.0.0) +25783 more potentially affected by CVE-2017-20165 via debug (>=2.0.0, <=2.6.8)

debug NPM version =2.0.0, =1.0.0, =0.0.15, =1.0.4, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =1.0.2, =1.0.1, =1.0.2 and more Source cves: CVE-2017-20165 Source advisory: OSV:GHSA-9VVW-CC9W-F27H...

7.5CVSS6AI score0.02046EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2023/01/09 12:30 p.m.•116 views

debug Inefficient Regular Expression Complexity vulnerability

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS7.4AI score0.02046EPSS
SaveExploits0References9Affected Software1
osv_cve
osv_cve
•added 2023/01/09 10:15 a.m.•27 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS7.6AI score
SaveExploits0References5
NVD
NVD
•added 2023/01/09 10:15 a.m.•47 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS5.7AI score0.02046EPSS
SaveExploits0References5
Prion
Prion
•added 2023/01/09 10:15 a.m.•25 views

Design/Logic Flaw

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

5CVSS7.5AI score0.02046EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2023/01/09 10:15 a.m.•38 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS5.4AI score0.02046EPSS
SaveExploits0References3
CVE
CVE
•added 2023/01/09 9:33 a.m.•148 views

CVE-2017-20165

CVE-2017-20165 affects the debug-js package (debug up to 3.0.x). The vulnerability is in the useColors function in src/node.js, where manipulating the argument str leads to inefficient regular-expression complexity (ReDoS). A fix is available in version 3.1.0, and the patch is identified as c38a0...

7.5CVSS5.2AI score0.02046EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2023/01/09 9:33 a.m.•9 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS0.02046EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2023/01/09 9:33 a.m.•101 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS4.3AI score0.02046EPSS
SaveExploits0
Rows per page
Query Builder