Lucene search
+L

2796 matches found

osv_ghsa
osv_ghsa
•added 2019/02/18 11:38 p.m.•47 views

GHSA-XJ62-87PG-VCV3 Regular Expression Denial of Service in jshamcrest

The jshamcrest package is affected by a regular expression denial of service vulnerability when certain types of user input are passed in to the emailAddress validator. Proof of concept js var js = require'jshamcrest' var emailAddress = new js.JsHamcrest.Matchers.emailAddress; var genstr = functi...

7.5CVSS5.9AI score0.01093EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:38 p.m.•40 views

Regular Expression Denial of Service in jshamcrest

The jshamcrest package is affected by a regular expression denial of service vulnerability when certain types of user input are passed in to the emailAddress validator. Proof of concept js var js = require'jshamcrest' var emailAddress = new js.JsHamcrest.Matchers.emailAddress; var genstr = functi...

7.5CVSS7.1AI score0.01093EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2019/02/07 6:18 p.m.•33 views

Pylons Colander Denial of Service vulnerability

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

7.5CVSS7AI score0.02072EPSS
SaveExploits1References6Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/07 6:18 p.m.•45 views

GHSA-RV95-4WXJ-6FQQ Pylons Colander Denial of Service vulnerability

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

8.7CVSS7.2AI score0.02072EPSS
SaveExploits1References7
Veracode
Veracode
•added 2019/02/04 1:24 a.m.•25 views

Denial Of Service (DoS)

colander is vulnerable to denial of service DoS attacks. The vulnerability exists as it is possible to cause an infinite loop when handling an unclosed parenthesis when using the URL Validator...

7.5CVSS7.1AI score0.02072EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2019/02/01 9:29 a.m.•14 views

PYSEC-2019-167

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

7.5CVSS6.8AI score0.02072EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
•added 2019/02/01 9:29 a.m.•21 views

CVE-2017-18361

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

7.5CVSS7.1AI score0.02072EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2019/02/01 9:29 a.m.•15 views

UBUNTU-CVE-2017-18361

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

7.5CVSS7.1AI score0.02072EPSS
SaveExploits1References4
osv_pysec
osv_pysec
•added 2019/02/01 9:29 a.m.•38 views

PYSEC-2019-167

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

7.5CVSS3.3AI score0.02072EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2019/02/01 9:29 a.m.•21 views

CVE-2017-18361

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

7.5CVSS6.6AI score
SaveExploits0References2
NVD
NVD
•added 2019/02/01 9:29 a.m.•28 views

CVE-2017-18361

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

7.5CVSS7.3AI score0.02072EPSS
SaveExploits1References2
Prion
Prion
•added 2019/02/01 9:29 a.m.•18 views

Code injection

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

5CVSS7.3AI score0.02072EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2019/02/01 9:00 a.m.•108 views

CVE-2017-18361

CVE-2017-18361 affects Pylons Colander up to version 1.6, where the URL validator can enter an infinite loop due to an unclosed parenthesis, causing a denial of service. The connected documents do not provide a remediation/patch version; monitor for updates from project maintainers.

7.5CVSS7.2AI score0.02072EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2019/02/01 9:00 a.m.•7 views

CVE-2017-18361

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

8.7CVSS0.02072EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2019/02/01 9:00 a.m.•65 views

CVE-2017-18361

Removed by vendor...

7.5CVSS7.5AI score0.02072EPSS
SaveExploits1
Cvelist
Cvelist
•added 2019/02/01 9:00 a.m.•39 views

CVE-2017-18361

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

7.3AI score0.02072EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/02/01 12:00 a.m.•16 views

PT-2019-8300

Name of the Vulnerable Software and Affected Versions Pylons Colander versions prior to 1.7 Description The issue allows an attacker to potentially cause a denial of service via an unclosed parenthesis in the URL validator, which can lead to an infinite loop. Recommendations For versions prior to...

8.7CVSS7.1AI score0.02072EPSS
SaveExploits1References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/01 12:00 a.m.•6 views

CVE-2017-18361: Loop with Unreachable Exit Condition

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

7.5CVSS5.9AI score0.02072EPSS
SaveExploits1References2
Veracode
Veracode
•added 2019/01/15 9:01 a.m.•38 views

Remote Code Execution

ReflectionHelper org.hibernate.validator.util.ReflectionHelper in Hibernate Validator is vulnerable to remote code execution. It is possible because it does not enforce Java Security Manager JSM restrictions, thereby allowing the attacker to trigger restricted reflection calls via a malicious...

5CVSS6.7AI score0.02913EPSS
SaveExploits0References33Affected Software96
Tenable Nessus
Tenable Nessus
•added 2019/01/03 12:00 a.m.•38 views

Fedora 29 : php-symfony3 (2018-8d3a9bdff1)

Version 3.4.20 2018-12-06 - security CVE-2018-19790 Security\Http detect bad redirect targets using backslashes @xabbuh - security CVE-2018-19789 Form Filter file uploads out of regular form types @nicolas-grekas - bug 29436 Cache Fixed Memcached adapter doClearto call flush raitocz - bug 29441...

6.1CVSS6.4AI score0.03589EPSS
SaveExploits0References5
Rows per page
Query Builder