Lucene search
+L

10430 matches found

vulnersOsv
vulnersOsv
•added 2023/01/09 12:30 p.m.•10 views

0.8.18-p11 (0.8.18-p12), 04_nodeblog (1.0.0) +25770 more potentially affected by CVE-2017-20165 via debug (>=2.0.0, <=2.6.8)

debug NPM version =2.0.0, =1.0.0, =0.0.15, =1.0.4, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =1.0.2, =1.0.1, =1.0.2 and more Source cves: CVE-2017-20165 Source advisory: OSV:GHSA-9VVW-CC9W-F27H...

7.5CVSS6AI score0.02105EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2023/01/09 12:30 p.m.•119 views

debug Inefficient Regular Expression Complexity vulnerability

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS7.4AI score0.02105EPSS
SaveExploits0References9Affected Software1
osv_cve
osv_cve
•added 2023/01/09 10:15 a.m.•28 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS7.6AI score
SaveExploits0References5
NVD
NVD
•added 2023/01/09 10:15 a.m.•47 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS5.7AI score0.02105EPSS
SaveExploits0References5
Prion
Prion
•added 2023/01/09 10:15 a.m.•27 views

Design/Logic Flaw

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

5CVSS7.5AI score0.02105EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2023/01/09 10:15 a.m.•40 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS5.4AI score0.02105EPSS
SaveExploits0References3
Mend
Mend
•added 2023/01/09 9:33 a.m.•11 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS0.02105EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2023/01/09 9:33 a.m.•38 views

CVE-2017-20165 debug-js debug node.js useColors redos

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

3.5CVSS6.8AI score0.02105EPSS
SaveExploits0References5
CVE
CVE
•added 2023/01/09 9:33 a.m.•152 views

CVE-2017-20165

CVE-2017-20165 affects the debug-js package (debug up to 3.0.x). The vulnerability is in the useColors function in src/node.js, where manipulating the argument str leads to inefficient regular-expression complexity (ReDoS). A fix is available in version 3.1.0, and the patch is identified as c38a0...

7.5CVSS5.2AI score0.02105EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2023/01/09 9:33 a.m.•106 views

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS4.3AI score0.02105EPSS
SaveExploits0
Veracode
Veracode
•added 2023/01/09 4:25 a.m.•58 views

Regular Expression Denial Of Service

luxon is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists via the replace parameter in regexParser.js, which does not properly handle user-untrusted data allowing the attacker to supply arbitrary input to the function, resulting in a system crash...

7.5CVSS7.5AI score0.01785EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/09 12:00 a.m.•8 views

CVE-2017-20165: Inefficient Regular Expression Complexity

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

7.5CVSS5.1AI score0.02105EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/01/09 12:00 a.m.•87 views

Oracle Linux 8 : nodejs:14 (ELSA-2023-0050)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0050 advisory. - Apply upstream fix for CVE-2022-24999 Resolves: CVE-2022-24999 - Record CVEs fixed by current or previous upstream releases Resolves: CVE-2021-44906...

9.8CVSS7.2AI score0.15622EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
•added 2023/01/09 12:00 a.m.•50 views

CentOS 8 : nodejs:14 (CESA-2023:0050)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:0050 advisory. - Minimist =1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey lines 69-95. CVE-2021-44906 - node-fetch is vulnerable to...

9.8CVSS7.1AI score0.15622EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
•added 2023/01/09 12:00 a.m.•62 views

RHEL 8 : nodejs:14 (RHSA-2023:0050)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0050 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

9.8CVSS7.3AI score0.15622EPSS
SaveExploits4References14
Github Security Blog
Github Security Blog
•added 2023/01/07 6:30 p.m.•46 views

terminal-kit Inefficient Regular Expression Complexity vulnerability

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 can address this issue. The name of the patch is...

7.5CVSS4.8AI score0.0099EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2023/01/07 6:30 p.m.•45 views

GHSA-WXGH-8GMR-3QH3 terminal-kit Inefficient Regular Expression Complexity vulnerability

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 can address this issue. The name of the patch is...

7.5CVSS7.6AI score0.0099EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2023/01/07 5:15 p.m.•33 views

CVE-2021-4306

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...

7.5CVSS7.7AI score
SaveExploits0References4
NVD
NVD
•added 2023/01/07 5:15 p.m.•39 views

CVE-2021-4306

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...

7.5CVSS5.1AI score0.0099EPSS
SaveExploits0References4
Prion
Prion
•added 2023/01/07 5:15 p.m.•31 views

Design/Logic Flaw

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...

5CVSS7.6AI score0.0099EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder