Lucene search
+L

10446 matches found

Github Security Blog
Github Security Blog
•added 2022/09/16 5:20 p.m.•67 views

mako is vulnerable to Regular Expression Denial of Service

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.2AI score0.02174EPSS
SaveExploits1References10Affected Software1
Github Security Blog
Github Security Blog
•added 2022/09/16 12:00 a.m.•41 views

steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal via the source and sourceWithComments variable in main.js...

7.5CVSS7.2AI score0.01382EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2022/09/16 12:00 a.m.•40 views

GHSA-28V4-JF82-JVJ8 steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal via the source and sourceWithComments variable in main.js...

7.5CVSS5.8AI score0.01382EPSS
SaveExploits0References5
osv_ghsa
osv_ghsa
•added 2022/09/16 12:00 a.m.•83 views

GHSA-7F3X-2WCX-HWW8 steal vulnerable to Regular Expression Denial of Service via input variable

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal via the input variable in main.js...

7.5CVSS7AI score0.01302EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/09/16 12:00 a.m.•53 views

steal vulnerable to Regular Expression Denial of Service via input variable

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal via the input variable in main.js...

7.5CVSS7.2AI score0.01302EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
•added 2022/09/16 12:00 a.m.•39 views

Ubuntu: Security Advisory (USN-5613-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS6.8AI score0.02712EPSS
SaveExploits7References2
attackerkb
attackerkb
•added 2022/09/15 7:15 p.m.•12 views

CVE-2022-37260

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the input variable in main.js...

7.5CVSS7AI score0.01302EPSS
SaveExploits0References4
NVD
NVD
•added 2022/09/15 7:15 p.m.•46 views

CVE-2022-37260

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the input variable in main.js...

7.5CVSS0.01302EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/09/15 6:18 p.m.•58 views

CVE-2022-37260

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the input variable in main.js...

7.7AI score0.01302EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/09/15 6:18 p.m.•30 views

CVE-2022-37260

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the input variable in main.js...

7.5AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2022/09/15 4:15 p.m.•11 views

CVE-2022-37262

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js...

7.5CVSS5.7AI score0.01382EPSS
SaveExploits0References4
NVD
NVD
•added 2022/09/15 4:15 p.m.•36 views

CVE-2022-37262

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js...

7.5CVSS0.01382EPSS
SaveExploits0References3
Prion
Prion
•added 2022/09/15 4:15 p.m.•25 views

Denial of service

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js...

5CVSS7.5AI score0.01382EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2022/09/15 3:37 p.m.•28 views

CVE-2022-37262

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js...

7.5AI score0.01382EPSS
SaveExploits0References5
CVE
CVE
•added 2022/09/15 3:37 p.m.•84 views

CVE-2022-37262

CVE-2022-37262 is a ReDoS flaw affecting stealjs (StealJS) 2.2.4, reported via the source and sourceWithComments variables in main.js. Connected sources (Red Hat, Veracode, GHSA, OSV, CVE listings) consistently describe a Regular Expression Denial of Service vulnerability exploitable through craf...

7.5CVSS7.4AI score0.01382EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/09/15 3:37 p.m.•52 views

CVE-2022-37262

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js...

7.7AI score0.01382EPSS
SaveExploits0References3
Ubuntu
Ubuntu
•added 2022/09/15 11:04 a.m.•122 views

USN-5613-1: Vim vulnerabilities

It was discovered that Vim was not properly performing bounds checks when executing spell suggestion commands. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2022-0943 It was discovered that Vim was using freed memory when dealing with regula...

8.4CVSS7.3AI score0.02712EPSS
SaveExploits7
CNNVD
CNNVD
•added 2022/09/15 12:00 a.m.•22 views

Steal resource management error vulnerability

steal is StealJS open source an extensible general-purpose module loader . It can load JavaScript modules defined in ES6, AMD and CommonJS formats. A security vulnerability exists in steal 2.2.4, which originates from a StealJS Regular Expression Denial of Service ReDoS via the source and...

7.5CVSS7.3AI score0.01382EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/09/15 12:00 a.m.•20 views

PT-2022-23902 · Stealjs · Stealjs

Name of the Vulnerable Software and Affected Versions: stealjs steal version 2.2.4 Description: A Regular Expression Denial of Service ReDoS flaw was found in the input variable in main.js. This issue can cause a denial of service. Recommendations: For version 2.2.4, consider restricting the inpu...

7.5CVSS7.3AI score0.01302EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/09/15 12:00 a.m.•20 views

Steal security vulnerabilities

steal is StealJS open source an extensible general-purpose module loader . It can load JavaScript modules defined in ES6, AMD and CommonJS formats. A security vulnerability exists in steal 2.2.4, which results in a steal Regular Expression Denial of Service ReDoS via input variables in main.js...

7.5CVSS7.3AI score0.01302EPSS
SaveExploits0References4
Rows per page
Query Builder