Lucene search
+L

10303 matches found

NVD
NVD
•added 2025/05/02 9:15 p.m.•23 views

CVE-2025-4215

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.7CVSS0.00789EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/05/02 8:31 p.m.•53 views

CVE-2025-4215 gorhill uBlock Origin UI 1p-filters.js currentStateChanged redos

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.1CVSS0.00789EPSS
SaveExploits1References5
Mend
Mend
•added 2025/05/02 8:31 p.m.•8 views

CVE-2025-4215

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.7CVSS0.00789EPSS
SaveExploits1References9
CVE
CVE
•added 2025/05/02 8:31 p.m.•108 views

CVE-2025-4215

CVE-2025-4215 affects gorhill uBlock Origin up to 1.63.3b16, specifically the UI function currentStateChanged in src/js/1p-filters.js. The issue is described as an inefficient regular expression pattern used in filters, which can be triggered remotely and carries a relatively high attack complexi...

3.7CVSS4AI score0.00789EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/02 12:00 a.m.•4 views

CVE-2025-4215: Inefficient Regular Expression Complexity

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.7CVSS4AI score0.00789EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/02 12:00 a.m.•21 views

uBlock Origin 安全漏洞

uBlock Origin uBO is an efficient blocker for uBlock Origin-Chromium and Firefox by Raymond Hill Personal Developer. A security vulnerability exists in uBlock Origin 1.63.3b16 and earlier versions, which stems from improper regular expression complexity and could lead to a denial of service attac...

3.7CVSS3.5AI score0.00789EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/05/02 12:00 a.m.•17 views

CGI Gem Regular Expression DoS

The vulnerability of the CGI Gem software lies in the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability allows an attacker operating remotely to cause service interruptions...

7.8CVSS6.3AI score0.0076EPSS
SaveExploits0References8Affected Software6
IBM Security Bulletins
IBM Security Bulletins
•added 2025/05/01 2:01 p.m.•13 views

Security Bulletin: An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing, affects watsonx.data

Summary An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-45338 DESCRIPTION: An attacker can craft an input to the Parse...

5.3CVSS7AI score0.00868EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/01 12:00 p.m.•21 views

CVE-2025-1194

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

6.5CVSS6.7AI score0.00484EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/29 9:13 p.m.•38 views

CVE-2025-3985

A vulnerability was found in Apereo CAS 5.2.6. It has been classified as problematic. This affects the function ResponseEntity of the file cas-5.2.6\webapp-mgmt\cas-management-webapp-support\src\main\java\org\apereo\cas\mgmt\services\web\ManageRegisteredServicesMultiActionController.java. The...

5.1CVSS6.8AI score0.00623EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2025/04/29 12:30 p.m.•27 views

GHSA-FPWR-67PX-3QHX Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

4.3CVSS6.7AI score0.00484EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2025/04/29 12:30 p.m.•32 views

Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

6.5CVSS6.7AI score0.00484EPSS
SaveExploits1References4Affected Software1
Snyk
Snyk
•added 2025/04/29 12:30 p.m.•21 views

Regular Expression Denial of Service (ReDoS)

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the tokenizationgptneoxjapanese.py file, within the SubWordJapaneseTokenizer class. The regex is designed ...

6.5CVSS6.7AI score0.00484EPSS
SaveExploits1References2
NVD
NVD
•added 2025/04/29 12:15 p.m.•18 views

CVE-2025-1194

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

6.5CVSS0.00484EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/04/29 11:30 a.m.•22 views

CVE-2025-1194 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

4.3CVSS6.2AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2025/04/29 11:30 a.m.•35 views

CVE-2025-1194 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

4.3CVSS0.00484EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/04/29 11:30 a.m.•11 views

CVE-2025-1194 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

4.3CVSS4.6AI score0.00484EPSS
SaveExploits1References2
CVE
CVE
•added 2025/04/29 11:30 a.m.•273 views

CVE-2025-1194

CVE-2025-1194 – ReDoS in HuggingFace Transformers (GPT-NeoX-Japanese SubWordJapaneseTokenizer) The CVE describes a Regular Expression Denial of Service in the HuggingFace transformers package, specifically in tokenization_gpt_neox_japanese.py (GPT-NeoX-Japanese model). The vulnerability arises fr...

6.5CVSS5.9AI score0.00484EPSS
SaveExploits1References2Affected Software1
Amazon
Amazon
•added 2025/04/29 12:00 a.m.•10 views

Medium: containerd

Issue Overview: Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB...

7.5CVSS6.8AI score0.02006EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/04/29 12:00 a.m.•14 views

Amazon Linux 2 : runc (ALASDOCKER-2025-059)

The version of runc installed on the remote host is prior to 1.1.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-059 advisory. Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to...

7.5CVSS7AI score0.02006EPSS
SaveExploits0References6
Rows per page
Query Builder