Lucene search
+L

8174 matches found

attackerkb
attackerkb
•added 2021/06/21 8:15 p.m.•9 views

CVE-2021-29061

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs...

7.5CVSS7.3AI score0.02315EPSS
SaveExploits1References6
Prion
Prion
•added 2021/06/21 8:15 p.m.•25 views

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called...

5CVSS7.4AI score0.04179EPSS
SaveExploits1References9Affected Software2
osv_pysec
osv_pysec
•added 2021/06/21 8:15 p.m.•129 views

PYSEC-2021-427

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Mpmath v1.0.0 when the mpmathify function is called...

7.5CVSS3.6AI score0.04179EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2021/06/21 7:22 p.m.•45 views

CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

7.4AI score0.02502EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2021/06/21 7:22 p.m.•72 views

CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

7.5CVSS6.6AI score0.02502EPSS
SaveExploits1
NVD
NVD
•added 2021/06/21 4:15 p.m.•27 views

CVE-2021-29059

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

7.5CVSS0.02629EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2021/06/21 4:15 p.m.•33 views

CVE-2021-29060

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string...

5.3CVSS5.2AI score
SaveExploits0References4
osv_debian
osv_debian
•added 2021/06/21 4:15 p.m.•4 views

DEBIAN-CVE-2021-29060

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string...

5.3CVSS6.5AI score0.03134EPSS
SaveExploits1References1
Prion
Prion
•added 2021/06/21 4:15 p.m.•31 views

Design/Logic Flaw

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string...

5CVSS5.2AI score0.03134EPSS
SaveExploits1References4Affected Software1
osv_ubuntu
osv_ubuntu
•added 2021/06/21 4:15 p.m.•16 views

UBUNTU-CVE-2021-29060

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string...

5.3CVSS6.8AI score0.03134EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2021/06/21 4:15 p.m.•10 views

CVE-2021-29060

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string...

5.3CVSS6.6AI score0.03134EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2021/06/21 3:49 p.m.•39 views

CVE-2021-29059

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

7.6AI score0.02629EPSS
SaveExploits1References4
CVE
CVE
•added 2021/06/21 3:45 p.m.•139 views

CVE-2021-29060

CVE-2021-29060 is a ReDOS in the Node.js color-string module (Color-String) triggered by crafted HWB strings, with IBM security bulletins stating IBM Process Mining and IBM QRadar-related deployments are affected. The vulnerability affects Color-String 1.5.5 and earlier; remediation is to upgrade...

5.3CVSS5.3AI score0.03134EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2021/06/21 12:00 p.m.•44 views

CVE-2020-28200

The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension...

4.3CVSS6.8AI score0.01968EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•15 views

Sindre Sorhus IS-SVG 安全漏洞

Sindre Sorhus is-svg is Sindre Sorhus an open source application. It provides functions to check whether a string or buffer is SVG. A security vulnerability exists in IS-SVG that stems from a Regular Expression Denial of Service ReDOS when the application checks a crafted invalid SVG string...

7.5CVSS7.6AI score0.02629EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•10 views

Color-String 安全漏洞

Color-String is an open source library for parsing and generating CSS color strings. A security vulnerability exists in Color-String 1.5.5 and earlier versions that stems from a Regular Expression Denial of Service ReDOS that occurs when an application examines a carefully crafted piece of data...

5.3CVSS6.7AI score0.03134EPSS
SaveExploits1References12
Debian CVE
Debian CVE
•added 2021/06/21 12:00 a.m.•126 views

CVE-2021-29063

A Regular Expression Denial of Service ReDOS vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called...

7.5CVSS7.4AI score0.04179EPSS
SaveExploits1
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•25 views

Prototype 安全漏洞

Prototype JavaScript framework prototypejs is a JavaScript development framework. A security vulnerability exists in Prototype JavaScript framework 1.6 and earlier versions, which can be exploited by attackers to cause a Regular Expression Denial of Service ReDOS by stripping HTML markup...

7.5CVSS6.9AI score0.02502EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•23 views

Vfsjfilechooser2 安全漏洞

Vfsjfilechooser2 is an open source vfsjfilechooser project's mavenized branch . It is a replacement for Java's JFileChooser Swing component. A security vulnerability exists in Vfsjfilechooser2 0.2.9 and earlier, which stems from a Regular Expression Denial of Service ReDOS that occurs when an...

7.5CVSS7.2AI score0.02315EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•19 views

Mpmath 安全漏洞

Mpmath is a free BSD-licensed Python library for real and complex floating-point operations with arbitrary precision. A security vulnerability exists in Mpmath version 1.0.0, which stems from a Regular Expression Denial of Service ReDOS that occurs when an application examines a carefully crafted...

7.5CVSS7.3AI score0.04179EPSS
SaveExploits1References10
Rows per page
Query Builder