Lucene search
+L

8064 matches found

Cvelist
Cvelist
•added 2023/01/11 12:00 a.m.•43 views

CVE-2023-22963

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^0000-9$ regular expression...

5.6AI score0.00489EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/11 12:00 a.m.•4 views

CVE-2020-36649: Inefficient Regular Expression Complexity

A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file papaparse.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 5.2.0 is able to address this issue. The name of the...

7.5CVSS5AI score0.01388EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/11 12:00 a.m.•6 views

CVE-2018-25074: Inefficient Regular Expression Complexity

A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The patch is named...

7.5CVSS5.2AI score0.00918EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/11 12:00 a.m.•19 views

Prestaul skeemas 安全漏洞

Prestaul skeemas is a comprehensive validation of JSON schemas drafts 3 and 4. A security vulnerability exists in Prestaul skeemas, which stems from the fact that incorrect manipulation of the parameter uri can lead to inefficient regular expression complexity...

7.5CVSS5.5AI score0.00918EPSS
SaveExploits0References4
OSV
OSV
•added 2023/01/11 12:00 a.m.•23 views

CVE-2023-22963

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^0000-9$ regular expression...

5.3CVSS5.4AI score
SaveExploits0References4
Veracode
Veracode
•added 2023/01/10 7:04 a.m.•69 views

Regular Expression Denial Of Service

debug is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists in useColors function of node.js due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious string...

7.5CVSS7.1AI score0.02046EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/01/10 12:00 a.m.•136 views

AlmaLinux 8 : nodejs:14 (ALSA-2023:0050)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0050 advisory. minimist: prototype pollution CVE-2021-44906 node-fetch: exposure of sensitive information to an unauthorized actor CVE-2022-0235 nodejs-minimatch: ReDoS...

9.8CVSS7.1AI score0.15622EPSS
SaveExploits4References6
Github Security Blog
Github Security Blog
•added 2023/01/09 2:10 p.m.•59 views

Luxon Inefficient Regular Expression Complexity vulnerability

Impact Luxon's DateTime.fromRFC2822 has quadratic N^2 complexity on some specific inputs. This causes a noticeable slowdown for inputs with lengths above 10k characters. Users providing untrusted data to this method are therefore vulnerable to ReDoS attacks. This is the same bug as Moment's...

7.5CVSS7.5AI score0.01707EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
•added 2023/01/09 12:30 p.m.•115 views

debug Inefficient Regular Expression Complexity vulnerability

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS7.4AI score0.02046EPSS
SaveExploits0References9Affected Software1
vulnersOsv
vulnersOsv
•added 2023/01/09 12:30 p.m.•8 views

0.8.18-p11 (0.8.18-p12), 04_nodeblog (1.0.0) +25781 more potentially affected by CVE-2017-20165 via debug (>=2.0.0, <=2.6.8)

debug NPM version =2.0.0, =1.0.0, =0.0.15, =1.0.4, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =1.0.2, =1.0.1, =1.0.2 and more Source cves: CVE-2017-20165 Source advisory: OSV:GHSA-9VVW-CC9W-F27H...

7.5CVSS6AI score0.02046EPSS
SaveExploits0
NVD
NVD
•added 2023/01/09 10:15 a.m.•46 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS5.7AI score0.02046EPSS
SaveExploits0References5
OSV
OSV
•added 2023/01/09 10:15 a.m.•27 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS7.6AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2023/01/09 10:15 a.m.•38 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS5.4AI score0.02046EPSS
SaveExploits0References3
Prion
Prion
•added 2023/01/09 10:15 a.m.•24 views

Design/Logic Flaw

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

5CVSS7.5AI score0.02046EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/09 9:33 a.m.•34 views

CVE-2017-20165 debug-js debug node.js useColors redos

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

3.5CVSS6.8AI score0.02046EPSS
SaveExploits0References5
CVE
CVE
•added 2023/01/09 9:33 a.m.•146 views

CVE-2017-20165

CVE-2017-20165 affects the debug-js package (debug up to 3.0.x). The vulnerability is in the useColors function in src/node.js, where manipulating the argument str leads to inefficient regular-expression complexity (ReDoS). A fix is available in version 3.1.0, and the patch is identified as c38a0...

7.5CVSS5.2AI score0.02046EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2023/01/09 9:33 a.m.•7 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS0.02046EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2023/01/09 9:33 a.m.•101 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS4.3AI score0.02046EPSS
SaveExploits0
Veracode
Veracode
•added 2023/01/09 4:25 a.m.•55 views

Regular Expression Denial Of Service

luxon is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists via the replace parameter in regexParser.js, which does not properly handle user-untrusted data allowing the attacker to supply arbitrary input to the function, resulting in a system crash...

7.5CVSS7.5AI score0.01707EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/09 12:00 a.m.•5 views

CVE-2017-20165: Inefficient Regular Expression Complexity

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS5.1AI score0.02046EPSS
SaveExploits0References3
Rows per page
Query Builder