Lucene search
+L

8074 matches found

OSV
OSV
•added 2022/10/16 6:15 a.m.•14 views

DEBIAN-CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS6.3AI score0.01672EPSS
SaveExploits1References1
OSV
OSV
•added 2022/10/16 6:15 a.m.•11 views

PYSEC-2022-43183

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS6.7AI score0.01672EPSS
SaveExploits1References4
CVE
CVE
•added 2022/10/16 12:00 a.m.•383 views

CVE-2022-42969

CVE-2022-42969 affects the Python package py (through 1.11.0). The vulnerability allows a remote ReDoS via a crafted InfoSvnCommand argument in a Subversion repository, caused by mishandling of the info data, per connected IBM security bulletin. The description notes that this issue has been disp...

7.5CVSS7.3AI score0.01672EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/16 12:00 a.m.•3 views

CVE-2022-41323: Inefficient Regular Expression Complexity

In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression...

7.5CVSS7.1AI score0.03007EPSS
SaveExploits0References2
Mend
Mend
•added 2022/10/16 12:00 a.m.•1 views

CVE-2022-41323

In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression...

8.7CVSS0.03007EPSS
SaveExploits0References25
AlpineLinux
AlpineLinux
•added 2022/10/16 12:00 a.m.•113 views

CVE-2022-41323

In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression...

7.5CVSS6.7AI score0.03007EPSS
SaveExploits0
OSV
OSV
•added 2022/10/14 7:00 p.m.•26 views

GHSA-3RFM-JHWJ-7488 loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take ...

7.5CVSS6.5AI score0.02702EPSS
SaveExploits1References12
NVD
NVD
•added 2022/10/14 4:15 p.m.•31 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS0.02702EPSS
SaveExploits1References6
OSV
OSV
•added 2022/10/14 4:15 p.m.•13 views

DEBIAN-CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.7AI score0.02702EPSS
SaveExploits1References1
Prion
Prion
•added 2022/10/14 4:15 p.m.•38 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

5CVSS8.1AI score0.02702EPSS
SaveExploits1References6Affected Software1
UbuntuCve
UbuntuCve
•added 2022/10/14 4:15 p.m.•71 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02702EPSS
SaveExploits1References1
OSV
OSV
•added 2022/10/14 4:15 p.m.•12 views

UBUNTU-CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02702EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/10/14 12:00 a.m.•10 views

loader-utils 安全漏洞

loader-utils is a webpack open source utility for the webpack loader. A security vulnerability exists in loader-utils version 2.0.0, which stems from a regular expression denial of service ReDoS vulnerability via the inclusion of a url variable in interpolateName.js...

7.5CVSS6.9AI score0.02702EPSS
SaveExploits1References14
Cvelist
Cvelist
•added 2022/10/14 12:00 a.m.•46 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.9AI score0.02702EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/14 12:00 a.m.•1 views

CVE-2022-41715: Undefined Security Weakness

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consu...

7.5CVSS6.8AI score0.01726EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/10/14 12:00 a.m.•10 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.4AI score0.02702EPSS
SaveExploits1References6
CVE
CVE
•added 2022/10/14 12:00 a.m.•330 views

CVE-2022-37603

CVE-2022-37603 describes a Regular Expression Denial of Service (ReDoS) in webpack-loader-utils, specifically in Function interpolateName.js (interpolateName.js) via the url variable. The issue affects loader-utils v2.0.0 and can lead to DoS conditions in applications that process input using thi...

7.5CVSS7.2AI score0.02702EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2022/10/14 12:00 a.m.•33 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS7.3AI score
SaveExploits0References8
AlpineLinux
AlpineLinux
•added 2022/10/14 12:00 a.m.•61 views

CVE-2022-41715

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consu...

7.5CVSS7.5AI score0.01726EPSS
SaveExploits0
OSV
OSV
•added 2022/10/12 12:00 p.m.•57 views

GHSA-HHQ3-FF78-JV3G loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)

A regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils via the resourcePath variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or ta...

7.5CVSS6.6AI score0.02761EPSS
SaveExploits0References12
Rows per page
Query Builder