Lucene search
+L

6795 matches found

OSV
OSV
added 2022/10/17 8:15 p.m.7 views

AZL-44451 CVE-2022-3517 affecting package nodejs-nodemon 2.0.3-5

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS6.9AI score0.01751EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/17 8:15 p.m.5 views

UBUNTU-CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS6.8AI score0.01751EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/10/17 12:0 a.m.3 views

minimatch 资源管理错误漏洞

minimatch is a global matcher in javascript by isaacs personal developer. A security vulnerability exists in minimatch that stems from a Regular Expression Denial of Service ReDoS that occurs when the braceExpand function is called with a specific parameter, resulting in a denial of service...

7.5CVSS7.4AI score0.01751EPSS
SaveExploits0References16
OSV
OSV
added 2022/10/17 12:0 a.m.30 views

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.3AI score0.01751EPSS
SaveExploits0References7
OSV
OSV
added 2022/10/16 12:0 p.m.5 views

GHSA-W596-4WVX-J9J6 Withdrawn Advisory: ReDoS in py library when used with subversion

Withdrawn Advisory This advisory has been withdrawn because evidence does not suggest that CVE-2022-42969 is a valid, reproducible vulnerability. This link is maintained to preserve external references. Original Description The py library through 1.11.0 for Python allows remote attackers to condu...

8.7CVSS6.7AI score0.0159EPSS
SaveExploits1References11
Github Security Blog
Github Security Blog
added 2022/10/16 12:0 p.m.34 views

Django denial-of-service vulnerability in internationalized URLs

In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression...

7.5CVSS7.4AI score0.02845EPSS
SaveExploits0References15Affected Software1
OSV
OSV
added 2022/10/16 6:15 a.m.5 views

PYSEC-2022-43183

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS6.7AI score0.0159EPSS
SaveExploits1References4
OSV
OSV
added 2022/10/16 6:15 a.m.5 views

DEBIAN-CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS6.3AI score0.0159EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2022/10/16 12:0 a.m.93 views

CVE-2022-41323

In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression...

7.5CVSS7.5AI score0.02845EPSS
SaveExploits0
CVE
CVE
added 2022/10/16 12:0 a.m.361 views

CVE-2022-42969

CVE-2022-42969 affects the Python package py (through 1.11.0). The vulnerability allows a remote ReDoS via a crafted InfoSvnCommand argument in a Subversion repository, caused by mishandling of the info data, per connected IBM security bulletin. The description notes that this issue has been disp...

7.5CVSS7.3AI score0.0159EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/10/14 7:0 p.m.13 views

GHSA-3RFM-JHWJ-7488 loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take ...

7.5CVSS6.5AI score0.02087EPSS
SaveExploits1References12
OSV
OSV
added 2022/10/14 4:15 p.m.6 views

DEBIAN-CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.7AI score0.02087EPSS
SaveExploits1References1
NVD
NVD
added 2022/10/14 4:15 p.m.24 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS0.02087EPSS
SaveExploits1References6
Prion
Prion
added 2022/10/14 4:15 p.m.28 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

5CVSS8.1AI score0.02087EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/10/14 4:15 p.m.4 views

UBUNTU-CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02087EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2022/10/14 4:15 p.m.59 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02087EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/10/14 12:0 a.m.5 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.4AI score0.02087EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.6 views

PT-2022-24024

Name of the Vulnerable Software and Affected Versions webpack loader-utils version 2.0.0 webpack loader-utils versions prior to 1.4.2 webpack loader-utils versions prior to 2.0.4 webpack loader-utils versions prior to 3.2.1 Description A Regular expression denial of service ReDoS flaw was found i...

7.5CVSS6.6AI score0.02087EPSS
SaveExploits1References27
CNNVD
CNNVD
added 2022/10/14 12:0 a.m.6 views

loader-utils 安全漏洞

loader-utils is a webpack open source utility for the webpack loader. A security vulnerability exists in loader-utils version 2.0.0, which stems from a regular expression denial of service ReDoS vulnerability via the inclusion of a url variable in interpolateName.js...

7.5CVSS6.9AI score0.02087EPSS
SaveExploits1References14
Cvelist
Cvelist
added 2022/10/14 12:0 a.m.30 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.9AI score0.02087EPSS
SaveExploits1References6
Rows per page
Query Builder