Microsoft Windows VBScript Regular Expression Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how VBScript...

MongoDB repair a can be remotely exploitable DoS（denial of service）vulnerability-vulnerability warning-the black bar safety net

! The popular NoSQL database MongoDB recently repaired a serious and can be remotely exploitable denial-of-service（DoS）vulnerabilities. The vulnerability by FortiGuard Labs researchers in the 2 on 2 0 and 2 3, find the MongoDB official have to 3 on 1 7, release patch. Vulnerability can be caused ...

PCRE Denial of Service Vulnerability (CNVD-2015-02117)

PCRE Perl Compatible Regular Expressions is a Perl library that includes a library of perl-compatible regular expressions. A denial of service vulnerability exists in PCRE 8.36 and earlier versions, which can be exploited by a remote attacker to cause stack exhaustion leading to a denial of servi...

CVE-2015-2305

Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library aka rxspencer alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a...

CVE-2015-2305

Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library aka rxspencer alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a...

Debian DLA-67-1 : php5 security update

CVE-2014-3538 It was discovered that the original fix for CVE-2013-7345 did not sufficiently address the problem. A remote attacker could still cause a denial of service CPU consumption via a specially crafted input file that triggers backtracking during processing of an awk regular expression...

DSA-3187-1 icu - security update

Bulletin has no description...

Debian Security Advisory DSA 3187-1 (icu - security update)

Several vulnerabilities were discovered in the International Components for Unicode ICU library. CVE-2013-1569 Glyph table issue. CVE-2013-2383 Glyph table issue. CVE-2013-2384 Font layout issue. CVE-2013-2419 Font processing issue. CVE-2014-6585 Out-of-bounds read. CVE-2014-6591 Additional...

Debian: Security Advisory (DSA-3187-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for pcre RHSA-2015:0330-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Low: Red Hat Security Advisory: pcre security and enhancement update

Updated pcre packages that fix one security issue and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

SUSE-SU-2015:0458-1 Security update for icu

icu was updated to fix one security issue. This security issue was fixed: - CVE-2014-9654: Insufficient size limit checks in regular expression compiler bnc917129...

grep: Denial of service

Background grep is the GNU regular expression matcher. Description A heap buffer overrun has been fixed in the bmexectrans function in kwset.c. Impact A local user can cause Denial of Service. Workaround There is no known workaround at this time. Resolution All grep users should upgrade to the...

[SECURITY] Fedora 21 Update: mutt-1.5.23-7.fc21

Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...

[SECURITY] Fedora 20 Update: mutt-1.5.23-4.fc20

Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...

CVE-2015-1042

The stringsanitizeurl function in core/stringapi.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" colon slash separator in the return parameter to loginpage.php, a differe...

Open redirect

The stringsanitizeurl function in core/stringapi.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" colon slash separator in the return parameter to loginpage.php, a differe...

CVE-2015-1042

The stringsanitizeurl function in core/stringapi.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" colon slash separator in the return parameter to loginpage.php, a differe...

Internet Bug Bounty: Adobe Flash Player Out-of-Bound Access Vulnerability

I. Summary Adobe Flash Player is prone to a vulnerability which leads to Out-of-Bound memory access memory via carefully crafted regular expression. An attacker can exploit this issue to defeat ASLR protection or even execute arbitrary code in the context of affected application Internet Explorer...

PT-2015-3416 · Marked · Marked

Name of the Vulnerable Software and Affected Versions: marked versions 0.3.3 and earlier Description: The issue is related to errors in resource management, allowing a remote attacker to cause a denial of service. This can be achieved through unspecified vectors that trigger a "catastrophic...