Lucene search
+L

8130 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/04 12:00 a.m.•4 views

CVE-2021-3842: Inefficient Regular Expression Complexity

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS5.8AI score0.01461EPSS
SaveExploits1References2
osv_alpine
osv_alpine
•added 2022/01/01 5:15 a.m.•11 views

ALPINE-CVE-2021-41817

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

7.5CVSS7AI score0.03222EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2022/01/01 5:15 a.m.•21 views

AZL-7110 CVE-2021-41817 affecting package ruby for versions less than 3.1.2-2

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

7.5CVSS6.7AI score0.03222EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/01 5:15 a.m.•19 views

CVE-2021-41817

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

7.5CVSS6.7AI score0.03222EPSS
SaveExploits1References8
Prion
Prion
•added 2022/01/01 5:15 a.m.•50 views

Design/Logic Flaw

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

5CVSS7.4AI score0.03222EPSS
SaveExploits1References5Affected Software7
osv_ubuntu
osv_ubuntu
•added 2022/01/01 5:15 a.m.•16 views

UBUNTU-CVE-2021-41817

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

7.5CVSS6.8AI score0.03222EPSS
SaveExploits1References7
OpenVAS
OpenVAS
•added 2021/12/30 12:00 a.m.•36 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2843)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.03188EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/12/30 12:00 a.m.•38 views

Huawei EulerOS: Security Advisory for python (EulerOS-SA-2021-2825)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.13166EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2021/12/29 12:00 a.m.•32 views

EulerOS Virtualization 3.0.2.0 : python (EulerOS-SA-2021-2825)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, wh...

7.5CVSS7AI score0.13166EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2021/12/29 12:00 a.m.•42 views

EulerOS Virtualization 3.0.2.0 : python-pillow (EulerOS-SA-2021-2843)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb...

9.8CVSS7.3AI score0.03188EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2021/12/26 12:00 a.m.•54 views

EulerOS 2.0 SP8 : python3 (EulerOS-SA-2021-2813)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the...

7.5CVSS7.1AI score0.13166EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2021/12/25 12:00 a.m.•61 views

EulerOS 2.0 SP8 : python2 (EulerOS-SA-2021-2812)

According to the versions of the python2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the...

7.5CVSS7.1AI score0.13166EPSS
SaveExploits2References3
osv_cve
osv_cve
•added 2021/12/24 8:15 p.m.•31 views

CVE-2021-23490

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...

7.5CVSS6.8AI score
SaveExploits0References3
NVD
NVD
•added 2021/12/24 8:15 p.m.•36 views

CVE-2021-23490

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...

7.5CVSS0.01831EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/12/24 8:05 p.m.•47 views

CVE-2021-23490 Regular Expression Denial of Service (ReDoS)

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...

7.5CVSS7.7AI score0.01831EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/12/24 8:00 p.m.•11 views

CVE-2021-23490

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...

7.5CVSS7AI score0.01831EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/12/24 12:00 a.m.•18 views

PT-2021-15535 · Unknown · Parse-Link-Header

Name of the Vulnerable Software and Affected Versions: parse-link-header versions prior to 2.0.0 Description: The issue concerns a Regular Expression Denial of Service ReDoS that can be triggered via the checkHeader function. This can lead to a denial of service. Recommendations: For versions pri...

7.5CVSS7.8AI score0.01831EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2021/12/23 9:15 p.m.•17 views

CVE-2021-45470

lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS regular expression denial of service or other impacts...

7.5CVSS7.1AI score0.01936EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2021/12/23 9:15 p.m.•49 views

CVE-2021-45470

lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS regular expression denial of service or other impacts...

7.5CVSS6.8AI score0.01936EPSS
SaveExploits1References3
Prion
Prion
•added 2021/12/23 9:15 p.m.•28 views

Code injection

lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS regular expression denial of service or other impacts...

5CVSS7.5AI score0.01936EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder