Lucene search
+L

10411 matches found

BDU FSTEC
BDU FSTEC
•added 2023/04/13 12:00 a.m.•23 views

Ruby Time Library DoS

The vulnerability of the Ruby interpreter’s Time library relates to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS7AI score0.02452EPSS
SaveExploits0References13Affected Software5
RedHat Linux
RedHat Linux
•added 2023/04/12 3:10 p.m.•13 views

http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

A flaw was found in http-cache-semantics. When the server reads the cache policy from the request using this library, a Regular Expression Denial of Service occurs, caused by malicious request header values sent to the server...

7.5CVSS7.1AI score0.01613EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2023/04/12 3:04 p.m.•10 views

http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

A flaw was found in http-cache-semantics. When the server reads the cache policy from the request using this library, a Regular Expression Denial of Service occurs, caused by malicious request header values sent to the server...

7.5CVSS7.1AI score0.01613EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2023/04/12 3:04 p.m.•16 views

nodejs-minimatch: ReDoS via the braceExpand function

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.1AI score0.02279EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2023/04/12 3:04 p.m.•17 views

glob-parent: Regular Expression Denial of Service

A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service ReDoS attacks, affecting system availability...

7.5CVSS6.6AI score0.01635EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2023/04/12 3:04 p.m.•74 views

Important: Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update

An update for the nodejs:14 module is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.8CVSS7.2AI score0.2361EPSS
SaveExploits11References19
RedHat Linux
RedHat Linux
•added 2023/04/12 3:03 p.m.•11 views

glob-parent: Regular Expression Denial of Service

A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service ReDoS attacks, affecting system availability...

7.5CVSS6.6AI score0.01635EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2023/04/12 3:03 p.m.•13 views

nodejs-minimatch: ReDoS via the braceExpand function

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.1AI score0.02279EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2023/04/12 3:03 p.m.•22 views

http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

A flaw was found in http-cache-semantics. When the server reads the cache policy from the request using this library, a Regular Expression Denial of Service occurs, caused by malicious request header values sent to the server...

7.5CVSS7.1AI score0.01613EPSS
SaveExploits1References4
NVD
NVD
•added 2023/04/12 2:15 p.m.•30 views

CVE-2023-27704

Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service ReDoS...

5.5CVSS5.5AI score0.0037EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/04/12 2:15 p.m.•27 views

CVE-2023-27704

Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service ReDoS...

5.5CVSS5.8AI score0.0037EPSS
SaveExploits0References3
Prion
Prion
•added 2023/04/12 2:15 p.m.•30 views

Design/Logic Flaw

Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service ReDoS...

1.7CVSS5.5AI score0.0037EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/04/12 12:00 a.m.•14 views

CVE-2023-27704

Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service ReDoS...

5.5AI score0.0037EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/12 12:00 a.m.•9 views

CVE-2023-27704: Inefficient Regular Expression Complexity

Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service ReDoS...

5.5CVSS5.7AI score0.0037EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/04/12 12:00 a.m.•25 views

PT-2023-21300

Name of the Vulnerable Software and Affected Versions Void Tools Everything versions prior to 1.4.1.1022 Description The issue is related to a Regular Expression Denial of Service ReDoS. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

5.5CVSS5.7AI score0.0037EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2023/04/11 12:30 p.m.•50 views

Certwatcher - Tool For Capture And Tracking Certificate Transparency Logs, Using YAML Templates Based DSL

CertWatcher is a tool for capturing and tracking certificate transparency logs, using YAML templates. The tool helps detect and analyze websites using regular expression patterns and is designed for ease of use by security professionals and researchers. Certwatcher continuously monitors the...

7.3AI score
SaveExploits0References2
Veracode
Veracode
•added 2023/04/10 9:02 a.m.•37 views

Regular Expression Denial Of Service (ReDoS)

configobj is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficent regex complexity via the validate function, which can lead to a Denial of Service if an attacker is able to control the input being parsed...

5.9CVSS5.7AI score0.01269EPSS
SaveExploits1References5Affected Software1
Rockylinux
Rockylinux
•added 2023/04/06 3:52 p.m.•82 views

nodejs:16 security, bug fix, and enhancement update

An update is available for nodejs, nodejs-packaging, module.nodejs-packaging, module.nodejs-nodemon, nodejs-nodemon, module.nodejs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

8.6CVSS8AI score0.02209EPSS
SaveExploits5
Veracode
Veracode
•added 2023/04/06 7:39 a.m.•168 views

Regular Expression Denial Of Service (ReDoS)

angular is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists due to inefficient regular expression complexity in the resource service which allows an attacker to crash the application by submitting maliciously crafted input...

5.3CVSS7.1AI score0.01695EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
•added 2023/04/06 5:49 a.m.•213 views

Regular Expression Denial Of Service (ReDoS)

angular is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists due to inefficient regular expression complexity in the angular.copy function. which allows an attacker to crash the application by submitting maliciously crafted input...

5.3CVSS7.2AI score0.01695EPSS
SaveExploits1References4Affected Software2
Rows per page
Query Builder