Lucene search
+L

10560 matches found

PyPA
PyPA
•added 2022/07/25 11:15 p.m.•13 views

PYSEC-2022-237

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking...

7.5CVSS9.1AI score0.01617EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2022/07/25 11:15 p.m.•10 views

CVE-2022-34749

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking...

7.5CVSS5.9AI score0.01617EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2022/07/25 3:39 p.m.•52 views

CVE-2022-31163

A flaw was found in rubygem-tzinfo. When using the Timezone.get function, it fails to validate time zone identifiers correctly, allowing a new line character input within the identifier. This flaw allows an attacker to use the new line character and write any code, which will be executed within t...

7.5CVSS3.5AI score0.02449EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2022/07/25 2:15 p.m.•11 views

DEBIAN-CVE-2022-1310

Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.01069EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2022/07/25 2:15 p.m.•42 views

CVE-2022-1310

Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7AI score0.01069EPSS
SaveExploits1References1
Prion
Prion
•added 2022/07/25 2:15 p.m.•27 views

Design/Logic Flaw

Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS9AI score0.01069EPSS
SaveExploits1References3Affected Software1
osv_ubuntu
osv_ubuntu
•added 2022/07/25 2:15 p.m.•16 views

UBUNTU-CVE-2022-1310

Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7AI score0.01069EPSS
SaveExploits1References2
Mend
Mend
•added 2022/07/25 1:40 p.m.•4 views

CVE-2022-1310

Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.01069EPSS
SaveExploits1References6
Veracode
Veracode
•added 2022/07/25 7:55 a.m.•36 views

Regular Expression Denial Of Service (ReDoS)

mxnet is vulnerable to regular expression denial of service. The vulnerability exists in getkernel function of rtc.py due to improper handling of regular expressions which allows an attacker to send a specially crafted operator name causing a excessive resource consumption which then leads to an...

7.5CVSS7.1AI score0.01882EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
•added 2022/07/25 12:00 a.m.•50 views

Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption

A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...

7.5CVSS3.9AI score0.01882EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2022/07/25 12:00 a.m.•33 views

CVE-2022-34749

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking...

7.4AI score0.01617EPSS
SaveExploits0References5
CVE
CVE
•added 2022/07/25 12:00 a.m.•202 views

CVE-2022-34749

CVE-2022-34749 affects Mistune

7.5CVSS7.2AI score0.01617EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/25 12:00 a.m.•7 views

CVE-2022-34749: Inefficient Regular Expression Complexity

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking...

7.5CVSS7AI score0.01617EPSS
SaveExploits0References2
Prion
Prion
•added 2022/07/24 6:15 p.m.•23 views

Denial of service

A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...

5CVSS7.3AI score0.01882EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2022/07/24 5:45 p.m.•33 views

CVE-2022-24294 ReDoS in Apache MXNet RTC Module

A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...

5.9AI score0.01882EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/07/24 5:45 p.m.•71 views

CVE-2022-24294 ReDoS in Apache MXNet RTC Module

A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...

7.5AI score0.01882EPSS
SaveExploits0References2
Mend
Mend
•added 2022/07/24 5:45 p.m.•13 views

CVE-2022-24294

A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...

8.7CVSS0.01882EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/24 12:00 a.m.•7 views

CVE-2022-24294: Uncontrolled Resource Consumption

A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...

7.5CVSS7.2AI score0.01882EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/07/24 12:00 a.m.•25 views

Apache MXNet security vulnerabilities

Apache MXNet is an open source deep learning software framework from the Apache Apache Foundation in the United States. It is used for training and deploying deep neural networks. A security vulnerability exists in Apache MXNet incubating versions prior to 1.9.1, which stems from the use of regul...

7.5CVSS7.3AI score0.01882EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/07/22 4:15 a.m.•50 views

CVE-2022-31163

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source,...

8.1CVSS6.8AI score0.02449EPSS
SaveExploits1References5
Rows per page
Query Builder