Lucene search
+L

8879 matches found

OSV
OSV
added 2020/10/28 6:15 p.m.10 views

CVE-2020-26131

Issues were discovered in Open DHCP Server Regular 1.75 and Open DHCP Server LDAP Based 0.1Beta. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenDHCPServer.exe Regular or the OpenDHCPLdap.exe LDAP Based binary...

7.8CVSS7.1AI score0.00423EPSS
SaveExploits1References3
Veracode
Veracode
added 2020/10/28 12:28 a.m.31 views

Regular Expression Denial Of Service (ReDoS)

trim is vulnerable to regular expression denial of service ReDoS. An attacker can pass a malicious string input str via trim to cause a resource exhaustion and an application crash...

7.5CVSS3.9AI score0.03777EPSS
SaveExploits1References13Affected Software1
Positive Technologies
Positive Technologies
added 2020/10/28 12:00 a.m.7 views

PT-2020-16305 · Open · Open Dhcp Server

Name of the Vulnerable Software and Affected Versions: Open DHCP Server Regular version 1.75 Open DHCP Server LDAP Based version 0.1Beta Description: The issue is related to insufficient access restrictions in the default installation directory, allowing an attacker to elevate privileges. This ca...

7.8CVSS7.4AI score0.00423EPSS
SaveExploits1References4
NVD
NVD
added 2020/10/27 6:15 p.m.33 views

CVE-2020-7755

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values...

7.5CVSS7.5AI score0.02099EPSS
SaveExploits1References2
OSV
OSV
added 2020/10/27 6:15 p.m.8 views

CVE-2020-7755

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values...

7.5CVSS7.5AI score
SaveExploits0References2
Prion
Prion
added 2020/10/27 6:15 p.m.25 views

Input validation

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values...

5CVSS7.5AI score0.02099EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/10/27 5:45 p.m.40 views

CVE-2020-7755 Regular Expression Denial of Service (ReDoS)

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values...

7.5CVSS7.5AI score0.02099EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2020/10/27 5:41 p.m.5 views

CVE-2020-7755

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values...

7.5CVSS7.3AI score0.02099EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2020/10/27 3:05 p.m.32 views

CVE-2020-7754 Regular Expression Denial of Service (ReDoS)

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters...

7.5CVSS8.5AI score0.03481EPSS
SaveExploits1References4
Ubuntu
Ubuntu
added 2020/10/27 2:02 p.m.112 views

USN-4602-2: Perl vulnerabilities

USN-4602-1 fixed several vulnerabilities in Perl. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: ManhND discovered that Perl incorrectly handled certain regular expressions. In environments where untrusted regular expressions ar...

8.6CVSS7.5AI score0.11334EPSS
SaveExploits0
OSV
OSV
added 2020/10/27 9:15 a.m.5 views

CVE-2020-7753

All versions of package trim are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS7.2AI score0.03777EPSS
SaveExploits1References8
CVE
CVE
added 2020/10/27 8:15 a.m.204 views

CVE-2020-7753

CVE-2020-7753: The Connected IBM bulletin confirms that the trim package is vulnerable to Regular Expression Denial of Service (ReDoS) via trim() in all versions. It assigns a high base score (7.5) and references IBM X-Force data; however, the bulletin does not publicly specify a patched version ...

7.5CVSS7.5AI score0.03777EPSS
SaveExploits1References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/10/27 8:12 a.m.5 views

CVE-2020-7753

All versions of package trim are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS8AI score0.03777EPSS
SaveExploits1References14
Tenable Nessus
Tenable Nessus
added 2020/10/27 12:00 a.m.83 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Perl vulnerabilities (USN-4602-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4602-1 advisory. ManhND discovered that Perl incorrectly handled certain regular expressions. In environments where untrusted regular expressions...

8.6CVSS7.5AI score0.11334EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2020/10/27 12:00 a.m.13 views

PT-2020-19769 · Dat · Dat.Gui

Name of the Vulnerable Software and Affected Versions: dat.gui versions prior to a fixed version Description: The issue is related to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values. This can be exploited in all versions of the package dat.gui...

7.5CVSS6.4AI score0.02099EPSS
SaveExploits1References8
OSV
OSV
added 2020/10/26 11:11 a.m.7 views

USN-4602-1 perl vulnerabilities

ManhND discovered that Perl incorrectly handled certain regular expressions. In environments where untrusted regular expressions are evaluated, a remote attacker could possibly use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code...

8.6CVSS7.1AI score0.11334EPSS
SaveExploits0References4
Ubuntu
Ubuntu
added 2020/10/26 11:11 a.m.115 views

USN-4602-1: Perl vulnerabilities

ManhND discovered that Perl incorrectly handled certain regular expressions. In environments where untrusted regular expressions are evaluated, a remote attacker could possibly use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code...

8.6CVSS7.5AI score0.11334EPSS
SaveExploits0
Veracode
Veracode
added 2020/10/18 1:51 a.m.25 views

Remote Code Execution (RCE)

oniguruma is vulnerable to remote code execution RCE. The vulnerability exists as a buffer overflow can occur through a regular expression for compilation in concatoptexactstr in src/regcomp.c...

4.5AI score
SaveExploits1References7Affected Software5
nodejs
nodejs
added 2020/10/16 6:59 p.m.36 views

Regular Expression Denial of Service

Overview npm-user-validate before version 1.0.1 is vulnerable to a Regular Expression Denial of Service REDos. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters. Impact The issue affects the email function. If you use this...

6.8AI score
SaveExploits0Affected Software1
OSV
OSV
added 2020/10/16 6:56 p.m.28 views

GHSA-XGH6-85XH-479P Regular Expression Denial of Service in npm-user-validate

npm-user-validate before version 1.0.1 is vulnerable to a Regular Expression Denial of Service REDos. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters. Impact The issue affects the email function. If you use this function to...

7.5CVSS8.3AI score0.03481EPSS
SaveExploits1References1
Rows per page
Query Builder