Lucene search
+L

8855 matches found

OSV
OSV
added 2023/01/02 8:15 a.m.21 views

CVE-2021-4299

A vulnerability classified as problematic was found in cronvel string-kit up to 0.12.7. This vulnerability affects the function naturalSort of the file lib/naturalSort.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. Upgrading to versi...

7.5CVSS7.6AI score
SaveExploits0References4
Prion
Prion
added 2023/01/02 8:15 a.m.18 views

Design/Logic Flaw

A vulnerability classified as problematic was found in cronvel string-kit up to 0.12.7. This vulnerability affects the function naturalSort of the file lib/naturalSort.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. Upgrading to versi...

5CVSS7.6AI score0.00927EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2023/01/02 7:57 a.m.37 views

CVE-2021-4299 cronvel string-kit naturalSort.js naturalSort redos

A vulnerability classified as problematic was found in cronvel string-kit up to 0.12.7. This vulnerability affects the function naturalSort of the file lib/naturalSort.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. Upgrading to versi...

4.3CVSS7.8AI score0.00927EPSS
SaveExploits0References4
CVE
CVE
added 2023/01/02 7:57 a.m.63 views

CVE-2021-4299

The CVE-2021-4299 issue affects cronvel string-kit up to v0.12.7, specifically the naturalSort function in lib/naturalSort.js. The vulnerability stems from inefficient regular-expression complexity, enabling a remote attacker to cause performance-based impact (DoS). Upgrading to v0.12.8 mitigates...

7.5CVSS5.8AI score0.00927EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2023/01/02 12:00 a.m.9 views

String Kit 安全漏洞

String Kit is a string manipulation toolkit by the individual developer Cedric Ronvel. A security vulnerability exists in String Kit version 0.12.7 and earlier. An attacker exploited the vulnerability to cause low regular expression complexity...

7.5CVSS5.6AI score0.00927EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/31 9:30 p.m.89 views

GHSA-7599-FQGM-V84P rgb2hex vulnerable to inefficient regular expression complexity

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 can address this issue. The name of...

7.5CVSS7.6AI score0.0094EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/12/31 9:30 p.m.27 views

rgb2hex vulnerable to inefficient regular expression complexity

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 can address this issue. The name of...

7.5CVSS4.4AI score0.0094EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/12/31 8:15 p.m.15 views

CVE-2018-25061

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The...

7.5CVSS7.6AI score
SaveExploits0References4
Cvelist
Cvelist
added 2022/12/31 7:33 p.m.44 views

CVE-2018-25061 rgb2hex redos

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The...

4.3CVSS7.6AI score0.0094EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/12/31 12:00 a.m.55 views

rgb2hex 安全漏洞

rgb2hex is a lightweight rgb/rgba-to-hexadecimal parser from the personal developer Christian Bromann. A security vulnerability exists in rgb2hex version 0.1.5 and earlier. An attacker exploited the vulnerability to cause inefficient regular expression complexity...

7.5CVSS5.8AI score0.0094EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2022/12/31 12:00 a.m.5 views

CVE-2022-40897

...

5.9CVSS6.7AI score0.02617EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2022/12/30 11:15 p.m.39 views

CVE-2022-34682

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a null-pointer dereference, which may lead to denial of service...

5.5CVSS6.1AI score0.00235EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/12/30 12:00 a.m.47 views

CVE-2022-34672

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands...

7.8CVSS8.5AI score0.00207EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/12/28 12:00 a.m.10 views

Huawei EulerOS: Security Advisory for pcre2 (EulerOS-SA-2022-2868)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.7AI score0.03378EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2022/12/27 9:30 a.m.36 views

email-existence Inefficient Regular Expression Complexity vulnerability

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is...

7.5CVSS3.5AI score0.00721EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/12/27 9:30 a.m.27 views

GHSA-J5P7-JF4Q-742Q markdown-it vulnerable to Inefficient Regular Expression Complexity

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

7.5CVSS5.5AI score0.00946EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/12/27 9:30 a.m.30 views

markdown-it vulnerable to Inefficient Regular Expression Complexity

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

7.5CVSS7.4AI score0.00946EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/12/27 9:15 a.m.18 views

CVE-2018-25049

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is...

7.5CVSS7.5AI score
SaveExploits0References4
NVD
NVD
added 2022/12/27 9:15 a.m.28 views

CVE-2018-25049

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is...

7.5CVSS0.00721EPSS
SaveExploits0References4
Prion
Prion
added 2022/12/27 9:15 a.m.19 views

Design/Logic Flaw

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is...

5CVSS7.5AI score0.00721EPSS
SaveExploits0References4
Rows per page
Query Builder