Lucene search
+L

8189 matches found

Tenable Nessus
Tenable Nessus
•added 2021/01/11 12:00 a.m.•12 views

FreeBSD : CairoSVG -- Regular Expression Denial of Service vulnerability (a3cef1e6-51d8-11eb-9b8d-08002728f74c)

CairoSVG security advisories : When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service REDoS. If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. ...

5.4AI score
SaveExploits0References2
osv_cve
osv_cve
•added 2021/01/06 5:15 p.m.•34 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.5CVSS6.9AI score
SaveExploits0References4
osv_debian
osv_debian
•added 2021/01/06 5:15 p.m.•4 views

DEBIAN-CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.2AI score0.01368EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2021/01/06 5:15 p.m.•38 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.7AI score0.01368EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2021/01/06 5:15 p.m.•14 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.6AI score0.01368EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
•added 2021/01/06 5:15 p.m.•12 views

PYSEC-2021-5

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.7AI score0.01368EPSS
SaveExploits1References4Affected Software1
osv_pysec
osv_pysec
•added 2021/01/06 5:15 p.m.•17 views

PYSEC-2021-5

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.7AI score0.01368EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/01/06 5:00 p.m.•61 views

CVE-2021-21236 Regular Expression Denial of Service in CairoSVG

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS5.9AI score0.01368EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2021/01/06 5:00 p.m.•79 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS5.7AI score0.01368EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2021/01/06 5:00 p.m.•106 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS5.6AI score0.01368EPSS
SaveExploits1
osv_ghsa
osv_ghsa
•added 2021/01/06 4:57 p.m.•24 views

GHSA-HQ37-853P-G5CF Regular Expression Denial of Service in CairoSVG

Doyensec Vulnerability Advisory Regular Expression Denial of Service REDoS in cairosvg Affected Product: CairoSVG v2.0.0+ Vendor: https://github.com/Kozea Severity: Medium Vulnerability Class: Denial of Service Authors: Ben Caller Doyensec Summary When processing SVG files, the python package...

8.7CVSS6.6AI score0.01368EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2021/01/06 12:00 a.m.•13 views

PT-2021-14348

Name of the Vulnerable Software and Affected Versions: CairoSVG versions prior to 2.5.1 Description: The issue is related to a regular expression denial of service REDoS vulnerability in CairoSVG, a Python package used for converting SVG files. When processing SVG files, CairoSVG uses two regular...

8.7CVSS6.1AI score0.01368EPSS
SaveExploits1References30
GitLab Advisory Database
GitLab Advisory Database
•added 2021/01/06 12:00 a.m.•61 views

Regular Expression Denial of Service in CairoSVG

When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service REDoS. If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time...

5.7CVSS5.6AI score0.01368EPSS
SaveExploits1References8Affected Software1
Friends Of PHP
Friends Of PHP
•added 2021/01/01 4:46 p.m.•24 views

Regular expression Denial of Service

More info at https://typo3.org/security/advisory/typo3-ext-sa-2021-002...

7.2AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2020/12/30 7:13 p.m.•59 views

Regular Expression Denial of Service

Overview date-and-time is a package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. Recommendation Upgrade to version version 0.14.2 or later. References - GitHub Advisor...

5CVSS4.8AI score0.02172EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2020/12/30 1:31 p.m.•26 views

CVE-2020-26289

A flaw was found in nodejs-date-and-time. In date-and-time there a regular expression involved in parsing which can be exploited to cause a denial of service...

7.5CVSS4.2AI score0.02172EPSS
SaveExploits0References5
FreeBSD
FreeBSD
•added 2020/12/30 12:00 a.m.•12 views

CairoSVG -- Regular Expression Denial of Service vulnerability

CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service REDoS. If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time...

3.5AI score
SaveExploits0References1
Mend
Mend
•added 2020/12/28 6:50 p.m.•10 views

CVE-2020-26289

date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2...

8.7CVSS0.02172EPSS
SaveExploits0References5
Veracode
Veracode
•added 2020/12/28 5:41 a.m.•27 views

Regular Expression Denial Of Service (ReDoS)

date-and-time is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is possible due to an overly permissive regular expression, the parsing of certain date strings may lead to a denial of service...

7.5CVSS5.1AI score0.02172EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/28 12:00 a.m.•5 views

CVE-2020-26289: Uncontrolled Resource Consumption

date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2...

7.5CVSS5.7AI score0.02172EPSS
SaveExploits0References2
Rows per page
Query Builder