Lucene search
+L

8799 matches found

OSV
OSV
added 2025/10/21 1:4 p.m.13 views

CLSA-2025-1761051864 python3-setuptools: Fix of 2 CVEs

CVE-2022-40897: fix Regular Expression Denial of Service ReDoS in packageindex.py - CVE-2024-6345: fix remote code execution in packageindex module...

8.8CVSS7.4AI score0.02617EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/10/21 12:0 a.m.4 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987544 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: khugepaged: skip huge page collapse for special files The read-only THP for filesystems will...

5.5CVSS6AI score0.0021EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/16 6:30 p.m.11 views

EUVD-2025-34779

An integer overflow vulnerability exists in the QuickJS regular expression engine libregexp due to an inconsistent representation of the bytecode buffer size. The regular expression bytecode is stored in a DynBuf structure, which correctly uses a $\textsize\textt$ an unsigned type, typically...

7.1CVSS7AI score0.00427EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/10/16 5:59 p.m.12 views

CVE-2025-61921

A flaw was found in Sinatra. A Regular Expression Denial of Service ReDoS vulnerability can be triggered when parsing the If-Match and If-None-Match HTTP headers. A remote attacker can exploit this issue by sending a specially crafted header to an application endpoint that uses the etag method,...

6.9CVSS5.9AI score0.00458EPSS
SaveExploits1References8
AlpineLinux
AlpineLinux
added 2025/10/16 3:51 p.m.8 views

CVE-2025-62495

An integer overflow vulnerability exists in the QuickJS regular expression engine libregexp due to an inconsistent representation of the bytecode buffer size. The regular expression bytecode is stored in a DynBuf structure, which correctly uses a $\textsize\textt$ an unsigned type, typically...

8.8CVSS7.5AI score0.00427EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2025/10/16 3:51 p.m.8 views

CVE-2025-62495

An integer overflow vulnerability exists in the QuickJS regular expression engine libregexp due to an inconsistent representation of the bytecode buffer size. The regular expression bytecode is stored in a DynBuf structure, which correctly uses a $\textsize\textt$ an unsigned type, typically...

8.8CVSS5.7AI score0.00427EPSS
SaveExploits1
EUVD
EUVD
added 2025/10/16 9:30 a.m.13 views

EUVD-2025-34739

Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability...

6.5AI score0.00687EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/16 9:30 a.m.6 views

GHSA-9M49-P2J3-C6XM Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

5.3CVSS6.8AI score0.00687EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/10/16 9:30 a.m.10 views

Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

7.5CVSS6.8AI score0.00687EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/10/16 8:40 a.m.24 views

CVE-2025-61581 Apache Traffic Control: ReDoS issue in Traffic Router configuration

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

0.00687EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.9 views

Apache Traffic Control 安全漏洞

Apache Traffic Control is a distributed, scalable content delivery solution from the Apache USA Foundation. The product is primarily used to build large-scale content delivery networks. A security vulnerability exists in Apache Traffic Control that stems from a malicious pattern that can be...

7.5CVSS6.4AI score0.00687EPSS
SaveExploits0References1
Veracode
Veracode
added 2025/10/15 7:17 a.m.9 views

Regular Expression Denial Of Service (ReDoS)

Cattown is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to the use of inefficient regular expressions with potentially exponential backtracking complexity, which allows an attacker to craft malicious markdown inputs that cause excessive CPU usage and lead to...

8.7CVSS6.9AI score0.00334EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
added 2025/10/14 7:3 a.m.9 views

Regular Expression Denial Of Service (ReDoS)

transformers is vulnerable to a Regular Expression Denial Of Service ReDoS. The vulnerability is due to the douseweightdecay method in the AdamWeightDecay optimizer processing user-controlled regular expressions in the includeinweightdecay and excludefromweightdecay lists, which allows an attacke...

7.5CVSS6.9AI score0.00467EPSS
SaveExploits1References5Affected Software1
Snyk
Snyk
added 2025/10/10 7:41 p.m.4 views

Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the parsing of the If-Match and If-None-Match headers when the ETag method is used in response construction. An attacker can cause excessive resource consumption by sending specially crafted...

7.5CVSS6.8AI score0.00458EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2025/10/09 5:21 p.m.27 views

rexml: REXML: Denial of Service via inefficient regex parsing

A flaw was found in REXML. A remote attacker could exploit inefficient regular expression regex parsing when processing hex numeric character references &x...; in XML documents. This could lead to a Regular Expression Denial of Service ReDoS, impacting the availability of the affected component...

7.5CVSS7.3AI score0.00468EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2015-8262

Malware in sbrugna...

7.5CVSS8.5AI score0.04436EPSS
SaveExploits1References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2010-4028

Malware in sbrugna...

5CVSS7.9AI score0.51298EPSS
SaveExploits12References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-2109

Malware in sbrugna...

7.5CVSS7.6AI score0.02165EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2010-4027

Malware in sbrugna...

5CVSS6.4AI score0.39995EPSS
SaveExploits12References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-20752

Malware in sbrugna...

7.2CVSS7AI score0.01226EPSS
SaveExploits0References2
Rows per page
Query Builder