10410 matches found
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-configobj (SUSE-SU-2023:3369-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3369-1 advisory. - CVE-2023-26112: Fixed regular expression denial of service vulnerability in validate.py bsc1210070...
CVE-2023-3994
An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use...
CVE-2023-3364
An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use...
Firefox Thunderbird Regex Confidential Data
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient processing of regular expressions. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
Medium: oniguruma
Issue Overview: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in matchat during regular expression searching. A logical error involving order of validation and access in matchat could...
Security Bulletin: Vulnerabilities in Node.js modules affect IBM Voice Gateway
Summary Security Vulnerabilities in Node.js modules affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-36665 DESCRIPTION: protobuf.js could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution. By...
Amazon Linux 2 : python-configobj (ALAS-2023-2188)
The version of python-configobj installed on the remote host is prior to 4.7.2-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2188 advisory. All versions of the package configobj are vulnerable to Regular Expression Denial of Service ReDoS via the validate...
Amazon Linux 2023 : python3-mako (ALAS2023-2023-288)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-288 advisory. Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. CVE-2022-40023 Tenable has extract...
Amazon Linux 2 : python-pygments (ALAS-2023-2198)
The version of python-pygments installed on the remote host is prior to 1.4-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2198 advisory. In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some o...
sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
A flaw was found in sqlparse. The SQL parser contains a regular expression vulnerable to a Regular Expression Denial of Service ReDoS. The vulnerability may lead to a denial of service DoS...
Important: nodejs
Issue Overview: Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range. CVE-2022-25883 Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2...
Django EmailValidator URLValidator DoS
The vulnerability of the EmailValidator and URLValidator components of the Django web application framework is related to the use of a regular expression with high computational complexity when processing email subject lines and URL addresses. Exploiting this vulnerability could allow an attacker...
CVE-2023-36053
A regular expression denial of service vulnerability has been found in Django. Email and URL validators are vulnerable to this flaw when processing a very large number of domain name labels of emails and URLs...
Medium: python-pygments
Issue Overview: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a...
Low: python-configobj
Issue Overview: All versions of the package configobj are vulnerable to Regular Expression Denial of Service ReDoS via the validate function, using .+?\.\. Note: This is only exploitable in the case of a developer, putting the offending value in a server side configuration file. CVE-2023-26112...
Regular Expression Denial Of Service (ReDoS)
gitlab is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to the uncontrolled resource consumption in the library, allowing an attacker to cause an application crash by deploying maliciously crafted slash commands...
Regular Expression Denial Of Service (ReDoS)
gitlab is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in the Maven Package registry, allowing an attacker to cause an application crash by sending a maliciously crafted string...
Regular Expression Denial Of Service (ReDoS)
gitlab is vulnerable to Regular Expression Denial Of Service ReDoS. An attacker can cause an application crash by submitting a maliciously crafted input...
Regular Expression Denial Of Service (ReDoS)
gitlab is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists because the library causes excessive usage of resources when a maliciously crafted username is used when provisioning a new user...