Lucene search
+L

8140 matches found

Debian CVE
Debian CVE
•added 2022/01/04 2:50 p.m.•57 views

CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.3AI score0.01461EPSS
SaveExploits1
Mend
Mend
•added 2022/01/04 2:50 p.m.•4 views

CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

8.7CVSS0.01461EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2022/01/04 2:50 p.m.•43 views

CVE-2021-3842 Inefficient Regular Expression Complexity in nltk/nltk

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.7AI score0.01461EPSS
SaveExploits1References2
NVD
NVD
•added 2022/01/04 9:15 a.m.•43 views

CVE-2021-40110

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

7.5CVSS0.0286EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/01/04 9:15 a.m.•31 views

CVE-2021-40110

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

7.5CVSS7.1AI score0.0286EPSS
SaveExploits0References2
Prion
Prion
•added 2022/01/04 9:15 a.m.•35 views

Design/Logic Flaw

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

5CVSS7.6AI score0.0286EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/01/04 8:55 a.m.•54 views

CVE-2021-40110 Apache James IMAP vulnerable to a ReDoS

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

7.8AI score0.0286EPSS
SaveExploits0References2
Mend
Mend
•added 2022/01/04 8:55 a.m.•4 views

CVE-2021-40110

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

8.7CVSS0.0286EPSS
SaveExploits0References3
CVE
CVE
•added 2022/01/04 8:55 a.m.•109 views

CVE-2021-40110

CVE-2021-40110 affects Apache James prior to 3.6.1. A DoS can be triggered by an IMAP user crafting LIST commands that exploit a vulnerable regular expression; upgrading to Apache James 3.6.1 or higher enforces the RE2J regex engine to execute in linear time and mitigates the issue. The available...

7.5CVSS7.6AI score0.0286EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/04 12:00 a.m.•7 views

CVE-2021-40110: Undefined Security Weakness

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

7.5CVSS6AI score0.0286EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/04 12:00 a.m.•4 views

CVE-2021-3842: Inefficient Regular Expression Complexity

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS5.8AI score0.01461EPSS
SaveExploits1References2
osv_azl
osv_azl
•added 2022/01/01 5:15 a.m.•22 views

AZL-7110 CVE-2021-41817 affecting package ruby for versions less than 3.1.2-2

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

7.5CVSS6.7AI score0.03222EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/01 5:15 a.m.•19 views

CVE-2021-41817

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

7.5CVSS6.7AI score0.03222EPSS
SaveExploits1References8
osv_alpine
osv_alpine
•added 2022/01/01 5:15 a.m.•12 views

ALPINE-CVE-2021-41817

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

7.5CVSS7AI score0.03222EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/01/01 5:15 a.m.•17 views

UBUNTU-CVE-2021-41817

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

7.5CVSS6.8AI score0.03222EPSS
SaveExploits1References7
Prion
Prion
•added 2022/01/01 5:15 a.m.•50 views

Design/Logic Flaw

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

5CVSS7.4AI score0.03222EPSS
SaveExploits1References5Affected Software7
OpenVAS
OpenVAS
•added 2021/12/30 12:00 a.m.•36 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2843)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.03188EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/12/30 12:00 a.m.•38 views

Huawei EulerOS: Security Advisory for python (EulerOS-SA-2021-2825)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.13166EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2021/12/29 12:00 a.m.•32 views

EulerOS Virtualization 3.0.2.0 : python (EulerOS-SA-2021-2825)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, wh...

7.5CVSS7AI score0.13166EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2021/12/29 12:00 a.m.•42 views

EulerOS Virtualization 3.0.2.0 : python-pillow (EulerOS-SA-2021-2843)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb...

9.8CVSS7.3AI score0.03188EPSS
SaveExploits1References5
Rows per page
Query Builder