Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-28048

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00334EPSS
Exploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in warn-cache-signal-validate-data (npm)

The package warn-cache-signal-validate-data was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-38777 Malicious code in warn-cache-signal-validate-data (npm)

The package warn-cache-signal-validate-data was found to contain malicious code...

7.2AI score
Exploits0
Github Security Blog
Github Security Blog
added 2024/02/02 8:43 p.m.40 views

PHPMailer Local file inclusion

Impact Arbitrary local file inclusion via the $lang property, remotely exploitable if host application passes unfiltered user data into that property. The 3 CVEs listed are applications that used PHPMailer that were vulnerable to this problem. Patches It's not known exactly when this was fixed in...

7.5CVSS6.3AI score0.00741EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2022/06/24 5:15 p.m.8 views

CVE-2021-40893

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...

7.5CVSS0.00334EPSS
Exploits1References1
Prion
Prion
added 2022/06/24 5:15 p.m.12 views

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...

5CVSS7.5AI score0.00334EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/24 4:12 p.m.11 views

CVE-2021-40893

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...

7.7AI score0.00334EPSS
Exploits1References1
CVE
CVE
added 2022/06/24 4:12 p.m.56 views

CVE-2021-40893

CVE-2021-40893 describes a ReDOS vulnerability in the Node.js library validate-data v0.1.1 triggered while validating crafted invalid emails. Root cause: improper handling during email validation leads to excessive backtracking. Impact: potential Denial of Service. Affected component: validate-da...

7.5CVSS7.4AI score0.00334EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/06/24 12:0 a.m.2 views

validate-data 安全漏洞

validate-data is a NodeJs backend library by Anoop P R Individual Developer. It is used to validate data according to the provided rules. A denial of service vulnerability exists in validate-data version v0.1.1, which stems from not properly handling incoming error messages and can be exploited b...

7.5CVSS5.7AI score0.00334EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/06/24 12:0 a.m.4 views

PT-2022-11321 · Unknown · Validate-Data

Name of the Vulnerable Software and Affected Versions: validate-data version 0.1.1 Description: A Regular Expression Denial of Service ReDOS issue was found in the validation of crafted invalid emails. This occurs when the software attempts to validate specially crafted email addresses, leading t...

7.5CVSS7.3AI score0.00334EPSS
Exploits1References5
CNVD
CNVD
added 2022/03/14 12:0 a.m.23 views

TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20075)

TP-Link TL-WR886N is a wireless router from China Pulink.A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 2.3.8, which originates from the /cloudconfig/routerpost/modifyaccountpwd function on memory execution An authenticated attacker could use this vulnerability to execute...

10CVSS6AI score0.00982EPSS
Exploits1References1
OSV
OSV
added 2021/08/03 2:31 a.m.9 views

GSD-2021-1001407 net: validate lwtstate->data before returning from skb_tunnel_info()

net: validate lwtstate-data before returning from skbtunnelinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.241 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2016/07/03 1:59 a.m.0 views

UBUNTU-CVE-2016-5730

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving 1 an array value to FormDisplay.php, 2 incorrect data to validate.php, 3 unexpected data to Validator.php, 4 a missing config directory...

5.3CVSS6.8AI score0.01317EPSS
Exploits0References3
Rows per page
Query Builder