8874 matches found
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat of NUMBERFORMATS.PATTERNS1.posPre with a very high value. Note: 1 This package has been...
The vulnerability in the implementation of regular expression checks (regex for Rust) in web browsers Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.
The vulnerability of the regular expression validation implementation in Firefox web browsers, Firefox ESR, and Thunderbird email client is related to errors in syntax analysis of input data. Exploiting this vulnerability allows an attacker to cause service interruptions using specially crafted...
Use After Free
chromium is vulnerable to use after free. The vulnerability exists in regular expressions which causes a memory corruption which allows an attacker to cause an application crash...
Chromium: CVE-2022-1310 Use after free in regular expressions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Ruby 资源管理错误漏洞
Ruby is a cross-platform, object-oriented, dynamically-typed programming language from the individual developer, Yukihiro Matsumoto. A resource management error vulnerability exists in Ruby. The vulnerability allows an attacker to write to unexpected memory locations using specially crafted regul...
The vulnerability of Google Chrome’s browser, related to errors in regular expression processing, allows a hacker to execute arbitrary code.
Vulnerability of Google Chrome browser with errors in processing regular expressions. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...
SUSE-SU-2022:1164-1 Security update for go1.16
This update for go1.16 fixes the following issues: Update to version 1.16.15 bsc1182345: - CVE-2022-24921: Fixed a potential denial of service via large regular expressions bsc1196732. Non-security fixes: - Fixed an issue with v2 modules go51331. - Fixed an issue when building source in riscv64...
Regular Expression Denial of Service (ReDoS)
Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS due to an expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Details Denial...
CVE-2022-24836
A flaw was found in the nokogiri library when processing an inefficient and complex regular expression. This flaw allows an attacker to cause excessive consumption of resources, which affects performance...
Denial Of Service (DoS)
nokogiri is vulnerable to Denial Of Service DoS. SAX parser's inefficient entity handling for regular expressions causes excessive backtracking when a malicious documents are parsed which allows an attacker to cause an application crash...
Reddit: Regular Expression Denial of Service vulnerability
Summary: The vulnerability I have found is classified as a Regular Expression Denial of Service. While inspecting the source code file RealtimeGQLSubscriptionAsync.js I came across the nodemodule subscriptions-transport-ws See Screenshot 1. The search result of the subscriptions-transport-ws...
Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2022:1302)
The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:1302-1 advisory. - Mozilla: Use-after-free in NSSToken objects CVE-2022-1097 - Mozilla: Out of bounds write due to unexpected WebAuthN Extensions CVE-2022-28281 -...
GHSA-CRJR-9RC5-GHW8 Nokogiri Inefficient Regular Expression Complexity
Summary Nokogiri = 1.13.4. Severity The Nokogiri maintainers have evaluated this as High Severity 7.5 CVSS3.1. References CWE-1333 Inefficient Regular Expression Complexity Credit This vulnerability was reported by HackerOne user oooooooq ななおく...
Nokogiri Inefficient Regular Expression Complexity
Summary Nokogiri = 1.13.4. Severity The Nokogiri maintainers have evaluated this as High Severity 7.5 CVSS3.1. References CWE-1333 Inefficient Regular Expression Complexity Credit This vulnerability was reported by HackerOne user oooooooq ななおく...
Mozilla: Denial of Service via complex regular expressions
regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. Google Chrome suffers from a resource management error vulnerability that stems from the presence of post-release reuse in regular expressions...
Mozilla: Denial of Service via complex regular expressions
regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...
Mozilla: Denial of Service via complex regular expressions
regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...
firefox security update
An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...
nodejs-axios: Regular expression denial of service in trim function
A Regular Expression Denial of Service ReDoS vulnerability was found in the nodejs axios. This flaw allows an attacker to provide crafted input to the trim function, which might cause high resources consumption and as a consequence lead to denial of service. The highest threat from this...