8128 matches found
CVE-2021-3765
validator.js is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
validator.js is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3765
validator.js is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3765
validator.js is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3765
CVE-2021-3765 (validator.js) is described in the provided materials as a regular expression denial of service (ReDoS) vulnerability. The technical detail mentioned is a vulnerability in validator.js related to inefficient regular expression complexity, specifically a ReDoS condition triggered by ...
CVE-2021-3765 Inefficient Regular Expression Complexity in validatorjs/validator.js
validator.js is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3765
Removed by vendor...
CVE-2021-3765: Inefficient Regular Expression Complexity
validator.js is vulnerable to Inefficient Regular Expression Complexity...
Oracle Linux 8 : python3 (ELSA-2021-4057)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4057 advisory. 3.6.8-39.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8-39 - Security fix for CVE-2021-3733: Denial of service when identifying craft...
PT-2021-21765
Name of the Vulnerable Software and Affected Versions validator.js versions prior to 13.7.0 Description The issue is related to Inefficient Regular Expression Complexity. It affects the rtrim and trim sanitizers. There is no information provided about the estimated number of potentially affected...
ReDoS vulnerability in parser_apache2
Impact parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string can spend too much time in a regular expression, resulting in the potential for a DoS attack. Patches v1.14.2...
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via an apache log with a certain pattern of string that can take a long time matching the expression. Note: This only affects the parserapache2 plugin of the package. Details Denial of Service...
CVE-2021-41186 ReDoS vulnerability in parser_apache2
Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string ca...
PT-2021-23159
Name of the Vulnerable Software and Affected Versions Fluentd versions 0.14.14 through 1.14.1 Description The parser apache2 plugin in Fluentd suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string can spend too much time in a...
CVE-2021-41186: Uncontrolled Resource Consumption
Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parserapache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service ReDoS vulnerability. A broken apache log with a certain pattern of string ca...
Gitlab -- Multiple Vulnerabilities
Gitlab reports: Stored XSS via ipynb files Pipeline schedules on imported projects can be set to automatically active after import Potential Denial of service via Workhorse Improper Access Control allows Merge Request creator to bypass locked status Projects API discloses ID and name of private...
NewStart CGSL CORE 5.04 / MAIN 5.04 : perl Multiple Vulnerabilities (NS-SA-2021-0099)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has perl packages installed that are affected by multiple vulnerabilities: - Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...
NewStart CGSL MAIN 6.02 : perl Multiple Vulnerabilities (NS-SA-2021-0134)
The remote NewStart CGSL host, running version MAIN 6.02, has perl packages installed that are affected by multiple vulnerabilities: - Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. CVE-2020-10543 ...
NewStart CGSL MAIN 6.02 : perl Vulnerability (NS-SA-2021-0127)
The remote NewStart CGSL host, running version MAIN 6.02, has perl packages installed that are affected by a vulnerability: - regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive Sstudychunk calls. CVE-2020-12723 Note that Nessus has not...
