Lucene search
+L

10442 matches found

Github Security Blog
Github Security Blog
•added 2022/10/01 12:00 a.m.•38 views

css-what vulnerable to ReDoS due to use of insecure regular expression

The package css-what before 2.1.3 is vulnerable to Regular Expression Denial of Service ReDoS due to the use of insecure regular expression in the reattr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function...

7.5CVSS7.4AI score0.01904EPSS
SaveExploits1References7Affected Software1
NVD
NVD
•added 2022/09/30 8:15 p.m.•42 views

CVE-2022-34428

Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability, leading to temporary denial-of-service...

5CVSS0.00656EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/09/30 8:15 p.m.•25 views

CVE-2022-34428

Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability, leading to temporary denial-of-service...

2.7CVSS5.8AI score0.00656EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/09/30 7:25 p.m.•15 views

CVE-2022-34428

Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability, leading to temporary denial-of-service...

5CVSS5.1AI score0.00656EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2022/09/30 6:18 p.m.•59 views

CVE-2022-21222

A vulnerability was found in the css-what package. The flaw allows Regular expression denial of service ReDoS attacks, affecting system availability...

7.5CVSS5AI score0.01904EPSS
SaveExploits1References3
Veracode
Veracode
•added 2022/09/30 7:10 a.m.•26 views

Regular Expression Denial Of Service (ReDoS)

d3-color is vulnerable to regular expression denial of service. The vulnerability exists due to an ambiguous regular expression allowing an attacker to exploit the vulnerability by causing backtracking via a maliciously crafted string...

4.6AI score
SaveExploits0
NVD
NVD
•added 2022/09/30 5:15 a.m.•51 views

CVE-2022-24373

The package react-native-reanimated before 3.0.0-rc.1 are vulnerable to Regular Expression Denial of Service ReDoS due to improper usage of regular expression in the parser of Colors.js...

7.5CVSS0.01637EPSS
SaveExploits1References4
Prion
Prion
•added 2022/09/30 5:15 a.m.•24 views

Design/Logic Flaw

The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expression in the reattr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function...

5CVSS7.4AI score0.01904EPSS
SaveExploits1References3Affected Software1
osv_ubuntu
osv_ubuntu
•added 2022/09/30 5:15 a.m.•36 views

UBUNTU-CVE-2022-21222

The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expression in the reattr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function...

7.5CVSS5.8AI score0.01904EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2022/09/30 5:05 a.m.•58 views

CVE-2022-21222 Regular Expression Denial of Service (ReDoS)

The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expression in the reattr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function...

5.3CVSS7.5AI score0.01904EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/09/30 5:05 a.m.•36 views

CVE-2022-21222 Regular Expression Denial of Service (ReDoS)

The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expression in the reattr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function...

5.3CVSS7AI score0.01904EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2022/09/30 5:05 a.m.•6 views

CVE-2022-21222 Regular Expression Denial of Service (ReDoS)

The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expression in the reattr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function...

5.3CVSS7.4AI score0.01904EPSS
SaveExploits1References3
CVE
CVE
•added 2022/09/30 5:05 a.m.•197 views

CVE-2022-21222

CVE-2022-21222 affects the Node.js package css-what prior to version 2.1.3. The vulnerability stems from an insecure regular expression in the re_attr variable of index.js, enabling Regular Expression Denial of Service (ReDoS) via the parse function. Affected users should upgrade to 2.1.3 or newe...

7.5CVSS6AI score0.01904EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2022/09/30 5:05 a.m.•96 views

CVE-2022-21222

The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expression in the reattr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function...

7.5CVSS7.4AI score0.01904EPSS
SaveExploits1
CVE
CVE
•added 2022/09/30 5:00 a.m.•95 views

CVE-2022-24373

React Native Reanimated is vulnerable to Regular Expression Denial of Service (ReDoS) due to improper usage of a regular expression in the Colors.js parser. Affected versions are prior to 3.0.0-rc.1 (and, per multiple sources, prior to 2.10.0 as well). The root cause is the Colors.js parser’s reg...

7.5CVSS6.2AI score0.01637EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2022/09/30 5:00 a.m.•9 views

CVE-2022-24373 Regular Expression Denial of Service (ReDoS)

The package react-native-reanimated before 3.0.0-rc.1 are vulnerable to Regular Expression Denial of Service ReDoS due to improper usage of regular expression in the parser of Colors.js...

5.3CVSS7.5AI score0.01637EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2022/09/30 5:00 a.m.•40 views

CVE-2022-24373 Regular Expression Denial of Service (ReDoS)

The package react-native-reanimated before 3.0.0-rc.1 are vulnerable to Regular Expression Denial of Service ReDoS due to improper usage of regular expression in the parser of Colors.js...

5.3CVSS7.1AI score0.01637EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/30 12:00 a.m.•12 views

CVE-2022-34428: Inefficient Regular Expression Complexity

Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability, leading to temporary denial-of-service...

5CVSS5.6AI score0.00656EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2022/09/30 12:00 a.m.•50 views

CVE-2022-21222

The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expression in the reattr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function...

7.5CVSS7.1AI score0.01904EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/09/30 12:00 a.m.•18 views

React-Native-ReAnimated resource management error vulnerability

react-native-reanimated is an open source reimplementation of an animation library for React Native by Software Mansion. A resource management error vulnerability exists in versions prior to react-native-reanimated 3.0.0-rc.1, which stems from the incorrect use of regular expressions by the...

7.5CVSS7.2AI score0.01637EPSS
SaveExploits1References4
Rows per page
Query Builder