Lucene search
+L

6 matches found

Mend
Mend
•added 2023/06/22 5:00 a.m.•4 views

CVE-2023-26115

All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of an insecure regular expression within the result variable...

7.5CVSS0.01709EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/22 12:00 a.m.•4 views

CVE-2023-26115: Inefficient Regular Expression Complexity

All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of an insecure regular expression within the result variable...

7.5CVSS7.3AI score0.01709EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/06/22 12:00 a.m.•25 views

PT-2023-4760

Name of the Vulnerable Software and Affected Versions word-wrap versions all Description The issue is related to the use of a regular expression with inefficient computational complexity in the word-wrap module of the Node.js platform. This can be exploited by a remote attacker to cause a denial ...

7.8CVSS6.3AI score0.01709EPSS
SaveExploits1References20
CNNVD
CNNVD
•added 2023/06/22 12:00 a.m.•16 views

word-wrap 安全漏洞

word-wrap is a library by Jon Schlinkert, an individual developer in the United States. It is used to wrap words to a specified length. A security vulnerability exists in word-wrap, which stems from the use of an insecure regular expression in the result variable...

7.5CVSS6.4AI score0.01709EPSS
SaveExploits1References11
Snyk
Snyk
•added 2022/11/28 1:29 p.m.•10 views

Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of an insecure regular expression within the result variable. Note: The regex is vulnerable on its own, but the vulnerable function is not reachable as shipped in the package...

7.5CVSS6.8AI score0.01709EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/04/29 12:00 a.m.•6 views

PT-2020-12330

Name of the Vulnerable Software and Affected Versions pfsense versions prior to 2.4.5 Description The issue is related to an XSS vulnerability in the hostname field of the diag ping.php page. It occurs when inputs are passed to a command and executed, resulting in the $result variable being print...

6.1CVSS0.02391EPSS
SaveExploits0References6
Rows per page
Query Builder