Lucene search
+L

8179 matches found

osv_ubuntu
osv_ubuntu
•added 2021/01/13 7:15 p.m.•17 views

UBUNTU-CVE-2021-21252

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

7.5CVSS6.1AI score0.03575EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/01/13 6:21 p.m.•150 views

Regular Expression Denial of Service in jquery-validation

The GitHub Security Lab team has identified potential security vulnerabilities in jquery.validation. The project contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service This issue was discovered and reported by GitHub team member @erik-krogh Erik...

7.5CVSS2.8AI score0.03575EPSS
SaveExploits0References11Affected Software2
Veracode
Veracode
•added 2021/01/13 5:35 a.m.•16 views

Regular Expression Denial Of Service (ReDoS)

metro4 is vulnerable to regeular expression denial of service. An attacker is able to cause a denial of service condition by submitting a malicious URL which would take a long time to parse...

4.5AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/01/13 12:00 a.m.•23 views

jQuery Resource Management Error Vulnerability

jQuery is the United States John Resig individual developers of a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript, and features modularity, plug-in extensions, and more. A resource management error vulnerability exists in...

7.5CVSS6.1AI score0.03575EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2021/01/13 12:00 a.m.•74 views

CVE-2021-21252 Regular expression denial of service in jquery-validation

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

5.3CVSS7.7AI score0.03575EPSS
SaveExploits0References6
Mend
Mend
•added 2021/01/13 12:00 a.m.•4 views

CVE-2021-21252

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

7.5CVSS0.03575EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2021/01/13 12:00 a.m.•16 views

PT-2021-14362 · Jquery +1 · Jquery-Validation +1

Name of the Vulnerable Software and Affected Versions: jquery-validation versions prior to 1.19.3 Description: The issue concerns the jQuery Validation Plugin, which provides drop-in validation for existing forms. It contains one or more regular expressions that are vulnerable to ReDoS Regular...

9.8CVSS6.4AI score0.99215EPSS
SaveExploits19References85
Debian CVE
Debian CVE
•added 2021/01/13 12:00 a.m.•99 views

CVE-2021-21252

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS Regular Expression Denial of Service. This is fixe...

7.5CVSS5.2AI score0.03575EPSS
SaveExploits0
Snyk
Snyk
•added 2021/01/12 12:42 p.m.•12 views

Regular Expression Denial of Service (ReDoS)

Overview glob-parent is a package that helps extracting the non-magic parent path from a glob string. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. The enclosure regex used to check for strings ending in enclosure containing path separator. PoC by...

7.5CVSS8.6AI score0.04579EPSS
SaveExploits1References2
ArchLinux
ArchLinux
•added 2021/01/12 12:00 a.m.•160 views

[ASA-202101-12] python-cairosvg: denial of service

Arch Linux Security Advisory ASA-202101-12 ========================================== Severity: Low Date : 2021-01-12 CVE-ID : CVE-2021-21236 Package : python-cairosvg Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1412 Summary ======= The package python-cairosvg...

5.7CVSS2.5AI score0.01368EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2021/01/11 12:00 a.m.•12 views

FreeBSD : CairoSVG -- Regular Expression Denial of Service vulnerability (a3cef1e6-51d8-11eb-9b8d-08002728f74c)

CairoSVG security advisories : When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service REDoS. If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. ...

5.4AI score
SaveExploits0References2
Source Incite
Source Incite
•added 2021/01/11 12:00 a.m.•60 views

SRC-2021-0016 : Microsoft SharePoint Server InputFormRegularExpressionValidator Denial of Service Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to cause a denial of service on affected installations of SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the InputFormRegularExpressionValidator class. The issue results...

6.5CVSS6AI score0.02395EPSS
SaveExploits1
osv_cve
osv_cve
•added 2021/01/06 5:15 p.m.•33 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.5CVSS6.9AI score
SaveExploits0References4
osv_debian
osv_debian
•added 2021/01/06 5:15 p.m.•4 views

DEBIAN-CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.5CVSS6.2AI score0.01368EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/01/06 5:15 p.m.•14 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.6AI score0.01368EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
•added 2021/01/06 5:15 p.m.•12 views

PYSEC-2021-5

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.7AI score0.01368EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2021/01/06 5:15 p.m.•37 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.7AI score0.01368EPSS
SaveExploits1References6
osv_pysec
osv_pysec
•added 2021/01/06 5:15 p.m.•17 views

PYSEC-2021-5

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.7AI score0.01368EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2021/01/06 5:00 p.m.•106 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS5.6AI score0.01368EPSS
SaveExploits1
Cvelist
Cvelist
•added 2021/01/06 5:00 p.m.•61 views

CVE-2021-21236 Regular Expression Denial of Service in CairoSVG

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS5.9AI score0.01368EPSS
SaveExploits1References4
Rows per page
Query Builder