Lucene search
+L

8230 matches found

RedhatCVE
RedhatCVE
•added 2020/09/16 9:00 p.m.•36 views

CVE-2020-7733

A flaw was found in nodejs-ua-parser-js. The software is vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS3.3AI score0.04483EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2020/09/16 2:15 p.m.•46 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS6.6AI score0.04483EPSS
SaveExploits1References5
NVD
NVD
•added 2020/09/16 2:15 p.m.•51 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS0.04483EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2020/09/16 2:15 p.m.•45 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS7.1AI score0.04483EPSS
SaveExploits1References5
osv_ubuntu
osv_ubuntu
•added 2020/09/16 2:15 p.m.•23 views

UBUNTU-CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS7.3AI score0.04483EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2020/09/16 2:10 p.m.•72 views

CVE-2020-7733 Regular Expression Denial of Service (ReDoS)

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS7.5AI score0.04483EPSS
SaveExploits1References5
CVE
CVE
•added 2020/09/16 2:10 p.m.•197 views

CVE-2020-7733

CVE-2020-7733 affects ua-parser-js prior to 0.7.22, where the Redmi/Mi UA regex can cause a Regular Expression Denial of Service (ReDoS). This may allow a crafted request to trigger a DoS on affected environments. Remediation: upgrade ua-parser-js to 0.7.22 or newer (as per description). If any d...

7.5CVSS7.5AI score0.04483EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
•added 2020/09/16 2:10 p.m.•79 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS7.8AI score0.04483EPSS
SaveExploits1
attackerkb
attackerkb
•added 2020/09/16 2:05 p.m.•12 views

CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

7.5CVSS7.5AI score0.04483EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2020/09/16 12:00 a.m.•13 views

PT-2020-6059 · Github · Ua-Parser-Js

Name of the Vulnerable Software and Affected Versions: ua-parser-js versions prior to 0.7.22 Description: The issue is related to an uncontrolled resource consumption vulnerability in the ua-parser-js library. It may allow a remote attacker to cause a denial of service. The vulnerability is due t...

7.5CVSS7.4AI score0.04483EPSS
SaveExploits1References12
Github Security Blog
Github Security Blog
•added 2020/09/09 5:29 p.m.•25 views

personnummer/python vulnerable to Improper Input Validation

This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severity. Impact This vulnerability impacts...

2.5AI score
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/09 5:29 p.m.•25 views

GHSA-QV8Q-V995-72GR personnummer/csharp vulnerable to Improper Input Validation

This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severity. Impact This vulnerability impacts...

7AI score
SaveExploits0References4
Snyk
Snyk
•added 2020/09/09 3:28 p.m.•16 views

Regular Expression Denial of Service (ReDoS)

Overview ua-parser-js is a lightweight JavaScript-based user-agent string parser. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA. POC by Yeting Li var blank = " "; for let i = 1; i 5000; i++ blank...

7.5CVSS9AI score0.04483EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/09/09 12:00 a.m.•2 views

PT-2020-20966

Name of the Vulnerable Software and Affected Versions Personnummer versions prior to 3.0.2 Personnummer versions prior to 3.0.1 Personnummer versions prior to 3.0.3 Personnummer versions prior to 3.0.0 Personnummer versions prior to 3.3.0 Personnummer versions prior to 3.1.0 Personnummer versions...

5.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/09/09 12:00 a.m.•1 views

PT-2020-21503

Name of the Vulnerable Software and Affected Versions Personnummer versions prior to 3.0.2 Personnummer versions prior to 3.0.1 Personnummer versions prior to 3.0.3 Personnummer versions prior to 3.0.0 Personnummer versions prior to 3.3.0 Personnummer versions prior to 3.1.0 Personnummer versions...

5.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/09/09 12:00 a.m.•3 views

PT-2020-21469

Name of the Vulnerable Software and Affected Versions Personnummer versions prior to 3.0.2 Personnummer versions prior to 3.0.1 Personnummer versions prior to 3.0.3 Personnummer versions prior to 3.0.0 Personnummer versions prior to 3.3.0 Personnummer versions prior to 3.1.0 Personnummer versions...

5.9AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2020/09/08 12:00 a.m.•47 views

EulerOS Virtualization for ARM 64 3.0.2.0 : perl (EulerOS-SA-2020-1967)

According to the versions of the perl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Perl before 5.30.3 has an integer overflow related to mishandling of a 'PLregkindOPn == NOTHING' situation. A crafted...

8.6CVSS7AI score0.11334EPSS
SaveExploits0References4
Veracode
Veracode
•added 2020/09/07 7:12 a.m.•17 views

Regular Expression Denial Of Service (ReDoS)

pylint is vulnerable to regular expression denial of service. A regex sub-pattern ^\W+\w allows an attacker to cause a denial of service condition using the string ""+"1"5000 + "!"...

4.3AI score
SaveExploits0
osv_ghsa
osv_ghsa
•added 2020/09/04 6:05 p.m.•11 views

GHSA-VPGC-7H78-GX8F personnummer/js vulnerable to Improper Input Validation

This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severity. Impact This vulnerability impacts...

7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2020/09/04 6:05 p.m.•36 views

personnummer/js vulnerable to Improper Input Validation

This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severity. Impact This vulnerability impacts...

2.5AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder