Lucene search
+L

8062 matches found

OSV
OSV
•added 2023/03/30 6:30 a.m.•40 views

GHSA-QWQH-HM9M-P5HR angular vulnerable to regular expression denial of service via the <input type="url"> element

All versions of the package angular are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References10
Github Security Blog
Github Security Blog
•added 2023/03/30 6:30 a.m.•91 views

angular vulnerable to regular expression denial of service via the <input type="url"> element

All versions of the package angular are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5.3CVSS5.3AI score0.01695EPSS
SaveExploits1References10Affected Software1
OSV
OSV
•added 2023/03/30 5:15 a.m.•7 views

DEBIAN-CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS6.3AI score0.01695EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/30 5:15 a.m.•30 views

CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS5.4AI score0.01695EPSS
SaveExploits1References8
NVD
NVD
•added 2023/03/30 5:15 a.m.•31 views

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5.3CVSS5.4AI score0.01695EPSS
SaveExploits1References8
NVD
NVD
•added 2023/03/30 5:15 a.m.•32 views

CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5.3CVSS5.4AI score0.01695EPSS
SaveExploits1References8
OSV
OSV
•added 2023/03/30 5:15 a.m.•18 views

UBUNTU-CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS6.7AI score0.01695EPSS
SaveExploits1References5
Prion
Prion
•added 2023/03/30 5:15 a.m.•73 views

Design/Logic Flaw

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5CVSS5.2AI score0.01695EPSS
SaveExploits1References7Affected Software2
Prion
Prion
•added 2023/03/30 5:15 a.m.•55 views

Design/Logic Flaw

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5CVSS5.3AI score0.01695EPSS
SaveExploits1References7Affected Software2
UbuntuCve
UbuntuCve
•added 2023/03/30 5:15 a.m.•51 views

CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References4
OSV
OSV
•added 2023/03/30 5:15 a.m.•18 views

UBUNTU-CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2023/03/30 5:15 a.m.•41 views

CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/03/30 5:00 a.m.•11 views

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5.3CVSS5.2AI score0.01695EPSS
SaveExploits1References7
CVE
CVE
•added 2023/03/30 5:00 a.m.•170 views

CVE-2023-26116

CVE-2023-26116 applies to AngularJS: versions of the angular package up to 1.2.21 are vulnerable to a Regular Expression Denial of Service via the angular.copy() function due to an insecure regex. Exploitation requires a large crafted input and can cause catastrophic backtracking, leading to deni...

5.3CVSS5AI score0.01695EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
•added 2023/03/30 5:00 a.m.•59 views

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5.3CVSS5.4AI score0.01695EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2023/03/30 5:00 a.m.•49 views

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

5.3CVSS6.4AI score0.01695EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2023/03/30 5:00 a.m.•12 views

CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5.3CVSS5.2AI score0.01695EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2023/03/30 5:00 a.m.•63 views

CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5.3CVSS5.4AI score0.01695EPSS
SaveExploits1References7
CVE
CVE
•added 2023/03/30 5:00 a.m.•160 views

CVE-2023-26117

CVE-2023-26117 affects angular.js: ReDoS via the $resource service caused by an insecure regular expression. Affected: angular.js versions starting at 1.0.0 (as cited). Potential impact is denial of service under large, crafted inputs due to catastrophic backtracking. Remediation details present ...

5.3CVSS5AI score0.01695EPSS
SaveExploits1References8Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/30 5:00 a.m.•15 views

CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

5.3CVSS5.2AI score0.01695EPSS
SaveExploits1References7
Rows per page
Query Builder