Lucene search
+L

10352 matches found

Cvelist
Cvelist
•added 2024/10/26 8:26 p.m.•26 views

CVE-2020-26308 GHSL-2020-302: Regular Expression Denial of Service (ReDoS) in validate.js

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS0.00514EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/10/26 8:26 p.m.•6 views

CVE-2020-26308 GHSL-2020-302: Regular Expression Denial of Service (ReDoS) in validate.js

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS6.9AI score0.00514EPSS
SaveExploits1References2
CVE
CVE
•added 2024/10/26 8:26 p.m.•85 views

CVE-2020-26308

CVE-2020-26308 affects Validate.js (versions ≤ 0.13.1). The vulnerability stems from one or more regular expressions that can cause Regular Expression Denial of Service (ReDoS). The connected documents consistently describe ReDoS and note that, as of publication, no patches are available. No expl...

8.7CVSS6.6AI score0.00514EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2024/10/26 8:26 p.m.•5 views

CVE-2020-26308

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS0.00514EPSS
SaveExploits1References5
CVE
CVE
•added 2024/10/26 8:26 p.m.•64 views

CVE-2020-26307

HTML2Markdown (JavaScript) is vulnerable to Regular Expression Denial of Service (ReDoS) across all versions. The root cause is improperly crafted regular expressions used during HTML to Markdown conversion. As of publication, there are no patches available. Connected sources corroborate a ReDoS ...

8.7CVSS6.5AI score0.00406EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/26 8:26 p.m.•17 views

CVE-2020-26307 GHSL-2020-301: Regular Expression Denial of Service (ReDoS) in HTML2Markdown

HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS6.8AI score0.00406EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/26 8:26 p.m.•32 views

CVE-2020-26307 GHSL-2020-301: Regular Expression Denial of Service (ReDoS) in HTML2Markdown

HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS0.00406EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/26 8:26 p.m.•64 views

CVE-2020-26306

Knwl.js (JavaScript) versions 1.0.2 and earlier are vulnerable to Regular Expression Denial of Service (ReDoS) due to inefficient regular expressions. No patches were available at the time of publication. The issue affects text parsing of dates, times, phone numbers, emails, and locations; exploi...

8.7CVSS6.6AI score0.00454EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/26 8:26 p.m.•9 views

CVE-2020-26306 GHSL-2020-296: Regular Expression Denial of Service (ReDoS) in Knwl.js

Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are...

8.7CVSS7AI score0.00454EPSS
SaveExploits0References2
Mend
Mend
•added 2024/10/26 8:26 p.m.•7 views

CVE-2020-26306

Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are...

8.7CVSS0.00454EPSS
SaveExploits0References6
CVE
CVE
•added 2024/10/26 8:26 p.m.•77 views

CVE-2020-26305

CVE-2020-26305 concerns the CommonRegexJS library (a CommonRegex port for JavaScript). Multiple connected sources confirm that all available versions are affected by Regular Expression Denial of Service (ReDoS) due to inefficient or vulnerable regular expressions used by the library. The underlyi...

8.7CVSS7.5AI score0.00479EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/26 8:26 p.m.•20 views

CVE-2020-26304 GHSL-2020-290: Regular Expression Denial of Service (ReDoS) in foundation-sites

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any fixes are available...

8.7CVSS6.9AI score0.00539EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/10/26 8:26 p.m.•31 views

CVE-2020-26304 GHSL-2020-290: Regular Expression Denial of Service (ReDoS) in foundation-sites

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any fixes are available...

8.7CVSS0.00539EPSS
SaveExploits1References2
Mend
Mend
•added 2024/10/26 8:26 p.m.•7 views

CVE-2020-26303

insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS0.00539EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/10/26 8:26 p.m.•7 views

CVE-2020-26303 GHSL-2020-289: Regular Expression Denial of Service (ReDoS) in insane

insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS6.8AI score0.00539EPSS
SaveExploits1References2
CVE
CVE
•added 2024/10/26 8:26 p.m.•79 views

CVE-2020-26303

The CVE-2020-26303 entry concerns the insane HTML sanitizer. Affected versions are 2.6.2 and earlier. The underlying issue is a Regular Expression Denial of Service (ReDoS) vulnerability in one or more regular expressions used by the sanitizer. Public documentation indicates that as of publicatio...

8.7CVSS7.4AI score0.00539EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2024/10/26 12:00 a.m.•13 views

validate.js 安全漏洞

validate.js is a declarative validation library written in javascript by the individual developer Nicklas Ansman. A security vulnerability exists in validate.js version 0.13.1 and prior versions, which stems from the presence of a regular expression denial of service vulnerability...

8.7CVSS6.5AI score0.00514EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/10/26 12:00 a.m.•31 views

PT-2024-10795 · Unknown · Commonregexjs

Name of the Vulnerable Software and Affected Versions: CommonRegexJS versions all available versions Description: The issue concerns Regular Expression Denial of Service ReDoS due to vulnerable regular expressions in CommonRegexJS. No known patches are available as of the time of publication...

8.7CVSS6.9AI score0.00479EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/10/26 12:00 a.m.•20 views

CommonRegexJS 安全漏洞

CommonRegexJS is a CommonRegex port of JavaScript by the individual developer Talysson de Oliveira Cassiano. A security vulnerability exists in CommonRegexJS that stems from the inclusion of one or more regular expressions that are vulnerable to regular expression denial of service ReDoS attacks...

8.7CVSS6.4AI score0.00479EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/26 12:00 a.m.•22 views

PT-2024-10797 · Unknown · Html2Markdown

Name of the Vulnerable Software and Affected Versions: HTML2Markdown versions all available versions Description: The issue concerns a Regular Expression Denial of Service ReDoS in the HTML2Markdown Javascript implementation, which is used for converting HTML to Markdown text. No known patches ar...

8.7CVSS6.7AI score0.00406EPSS
SaveExploits0References5
Rows per page
Query Builder