Lucene search
+L

245 matches found

Pen Test Partners Blog
Pen Test Partners Blog
added 2021/05/17 7:27 a.m.663 views

EFB Tampering 3. Take-off pt2

Take-off Performance Part 2: Flap, Trim, Database and Sources of Data Target: FLAP SETTING There are various forms of flaps and slats. The difference between the two and the technicalities of how they work is outside the scope of this blog. As a general rule flaps extend from the rear/trailing ed...

6.8AI score
SaveExploits0
nodejs
nodejs
added 2021/05/10 6:48 p.m.99 views

Regular Expression Denial of Service in trim

Overview Versions of trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service ReDoS via trim. Recommendation Upgrade to version 0.0.3 or later References - CVE - GitHub Advisory...

5CVSS5.8AI score0.03777EPSS
SaveExploits1Affected Software1
Github Security Blog
Github Security Blog
added 2021/05/10 6:44 p.m.230 views

Regular Expression Denial of Service in trim

All versions of package trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS7.5AI score0.03777EPSS
SaveExploits1References12Affected Software1
vulnersOsv
vulnersOsv
added 2021/05/10 6:44 p.m.5 views

02strich-markdown (>=1.0.0 <=1.0.2), 10secondsofcode-custom (=1.0.0) +11494 more potentially affected by CVE-2020-7753 via trim (=0.0.1)

trim NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on trim and may be impacted: - 02strich-markdown =1.0.0, =1.0.0, =0.0.2, =0.0.1, =4.11.0, =0.1.0, =0.0.2, =0.2.0, =1.0.16, =1.2.0, =1.2.2 and more Source cves: CVE-2020-7753 Source...

7.5CVSS7.1AI score0.03777EPSS
SaveExploits1
OSV
OSV
added 2021/05/10 6:44 p.m.39 views

GHSA-W5P7-H5W8-2HFQ Regular Expression Denial of Service in trim

All versions of package trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS8.3AI score0.03777EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
added 2021/02/15 9:48 p.m.41 views

CVE-2020-28500

A flaw was found in nodejs-lodash. A Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions is possible...

5.3CVSS3.4AI score0.07336EPSS
SaveExploits1References4
OSV
OSV
added 2021/02/15 11:15 a.m.3 views

DEBIAN-CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.5AI score0.07336EPSS
SaveExploits1References1
NVD
NVD
added 2021/02/15 11:15 a.m.27 views

CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS0.07336EPSS
SaveExploits1References14
OSV
OSV
added 2021/02/15 11:15 a.m.30 views

CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.5AI score
SaveExploits0References14
UbuntuCve
UbuntuCve
added 2021/02/15 11:15 a.m.48 views

CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.8AI score0.07336EPSS
SaveExploits1References9
OSV
OSV
added 2021/02/15 11:15 a.m.4 views

UBUNTU-CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.8AI score0.07336EPSS
SaveExploits1References10
Prion
Prion
added 2021/02/15 11:15 a.m.36 views

Design/Logic Flaw

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5CVSS6.2AI score0.07336EPSS
SaveExploits1References14Affected Software19
Cvelist
Cvelist
added 2021/02/15 11:10 a.m.38 views

CVE-2020-28500 Regular Expression Denial of Service (ReDoS)

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.1AI score0.07336EPSS
SaveExploits1References14
Debian CVE
Debian CVE
added 2021/02/15 11:10 a.m.40 views

CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...

5.3CVSS6.9AI score0.07336EPSS
SaveExploits1
Veracode
Veracode
added 2020/10/28 12:28 a.m.30 views

Regular Expression Denial Of Service (ReDoS)

trim is vulnerable to regular expression denial of service ReDoS. An attacker can pass a malicious string input str via trim to cause a resource exhaustion and an application crash...

7.5CVSS3.9AI score0.03777EPSS
SaveExploits1References13Affected Software1
OSV
OSV
added 2020/10/27 9:15 a.m.4 views

CVE-2020-7753

All versions of package trim are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS7.2AI score0.03777EPSS
SaveExploits1References8
NVD
NVD
added 2020/10/27 9:15 a.m.23 views

CVE-2020-7753

All versions of package trim are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS7.6AI score0.03777EPSS
SaveExploits1References8
Prion
Prion
added 2020/10/27 9:15 a.m.21 views

Design/Logic Flaw

All versions of package trim are vulnerable to Regular Expression Denial of Service ReDoS via trim...

5CVSS7.4AI score0.03777EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2020/10/27 8:15 a.m.37 views

CVE-2020-7753 Regular Expression Denial of Service (ReDoS)

All versions of package trim are vulnerable to Regular Expression Denial of Service ReDoS via trim...

7.5CVSS8.3AI score0.03777EPSS
SaveExploits1References8
CVE
CVE
added 2020/10/27 8:15 a.m.193 views

CVE-2020-7753

CVE-2020-7753: The Connected IBM bulletin confirms that the trim package is vulnerable to Regular Expression Denial of Service (ReDoS) via trim() in all versions. It assigns a high base score (7.5) and references IBM X-Force data; however, the bulletin does not publicly specify a patched version ...

7.5CVSS7.5AI score0.03777EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder