Lucene search
+L

6795 matches found

OSV
OSV
added 2021/06/21 8:15 p.m.4 views

DEBIAN-CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

7.5CVSS6.7AI score0.02502EPSS
SaveExploits1References1
Prion
Prion
added 2021/06/21 8:15 p.m.11 views

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs...

5CVSS7.4AI score0.02315EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/06/21 8:15 p.m.3 views

CVE-2021-29063

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called...

7.5CVSS7.2AI score0.04179EPSS
SaveExploits1References13
Prion
Prion
added 2021/06/21 8:15 p.m.20 views

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called...

5CVSS7.4AI score0.04179EPSS
SaveExploits1References9Affected Software2
Prion
Prion
added 2021/06/21 8:15 p.m.83 views

Design/Logic Flaw

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

5CVSS7.4AI score0.02502EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2021/06/21 8:15 p.m.4 views

UBUNTU-CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

7.5CVSS6.4AI score0.02502EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2021/06/21 8:15 p.m.4 views

CVE-2021-29061

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs...

7.5CVSS7.3AI score0.02315EPSS
SaveExploits1References6
OSV
OSV
added 2021/06/21 8:15 p.m.100 views

PYSEC-2021-427

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Mpmath v1.0.0 when the mpmathify function is called...

7.5CVSS3.6AI score0.04179EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2021/06/21 7:22 p.m.29 views

CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

7.4AI score0.02502EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2021/06/21 7:22 p.m.28 views

CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

7.5CVSS6.6AI score0.02502EPSS
SaveExploits1
NVD
NVD
added 2021/06/21 4:15 p.m.19 views

CVE-2021-29059

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

7.5CVSS0.02813EPSS
SaveExploits1References4
OSV
OSV
added 2021/06/21 4:15 p.m.25 views

CVE-2021-29060

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string...

5.3CVSS5.2AI score0.03134EPSS
SaveExploits1References4
OSV
OSV
added 2021/06/21 4:15 p.m.1 views

DEBIAN-CVE-2021-29060

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string...

5.3CVSS6.5AI score0.03134EPSS
SaveExploits1References1
Prion
Prion
added 2021/06/21 4:15 p.m.25 views

Design/Logic Flaw

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string...

5CVSS5.2AI score0.03134EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/06/21 4:15 p.m.4 views

UBUNTU-CVE-2021-29060

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string...

5.3CVSS6.8AI score0.03134EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2021/06/21 4:15 p.m.3 views

CVE-2021-29060

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string...

5.3CVSS6.6AI score0.03134EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2021/06/21 3:49 p.m.26 views

CVE-2021-29059

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

7.6AI score0.02813EPSS
SaveExploits1References4
CVE
CVE
added 2021/06/21 3:45 p.m.121 views

CVE-2021-29060

CVE-2021-29060 is a ReDOS in the Node.js color-string module (Color-String) triggered by crafted HWB strings, with IBM security bulletins stating IBM Process Mining and IBM QRadar-related deployments are affected. The vulnerability affects Color-String 1.5.5 and earlier; remediation is to upgrade...

5.3CVSS5.3AI score0.03134EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2021/06/21 12:0 p.m.35 views

CVE-2020-28200

The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension...

4.3CVSS6.8AI score0.01968EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/06/21 12:0 a.m.7 views

Mpmath 安全漏洞

Mpmath is a free BSD-licensed Python library for real and complex floating-point operations with arbitrary precision. A security vulnerability exists in Mpmath version 1.0.0, which stems from a Regular Expression Denial of Service ReDOS that occurs when an application examines a carefully crafted...

7.5CVSS7.3AI score0.04179EPSS
SaveExploits1References10
Rows per page
Query Builder