CWE-1333 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-1333/ Sun, 26 Feb 2023 06:49:06 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-1333 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-1333/ 32 32 CVE-2018-25079 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-25079/ Sun, 26 Feb 2023 06:49:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-25079/ A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Upgrading to version 1.2.3 is able to address this issue. The name of […]

The post CVE-2018-25079 appeared first on CVE Vulnerability.

]]> A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Upgrading to version 1.2.3 is able to address this issue. The name of the patch is 149550935c63a98c11f27f694a7c4a9479e53794. It is recommended to upgrade the affected component. VDB-220058 is the identifier assigned to this vulnerability.

The post CVE-2018-25079 appeared first on CVE Vulnerability.

]]> CVE-2018-25077 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-25077/ Sun, 26 Feb 2023 06:49:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-25077/ A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spintax.js. The manipulation of the argument text leads to inefficient regular expression complexity. The name of the patch is 37767617846e27b87b63004e30216e8f919637d3. It is recommended to apply a patch to fix this issue. […]

The post CVE-2018-25077 appeared first on CVE Vulnerability.

]]> A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spintax.js. The manipulation of the argument text leads to inefficient regular expression complexity. The name of the patch is 37767617846e27b87b63004e30216e8f919637d3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218456.

The post CVE-2018-25077 appeared first on CVE Vulnerability.

]]> CVE-2018-25074 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-25074/ Sun, 26 Feb 2023 06:49:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-25074/ A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The name of the patch is 65e94eda62dc8dc148ab3e59aa2ccc086ac448fd. It is recommended to apply a patch to fix this issue. The associated identifier of […]

The post CVE-2018-25074 appeared first on CVE Vulnerability.

]]> A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The name of the patch is 65e94eda62dc8dc148ab3e59aa2ccc086ac448fd. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218003.

The post CVE-2018-25074 appeared first on CVE Vulnerability.

]]> CVE-2018-25061 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-25061/ Sun, 26 Feb 2023 06:49:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-25061/ A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The name of the patch is 9e0c38594432edfa64136fdf7bb651835e17c34f. It is recommended […]

The post CVE-2018-25061 appeared first on CVE Vulnerability.

]]> A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The name of the patch is 9e0c38594432edfa64136fdf7bb651835e17c34f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217151.

The post CVE-2018-25061 appeared first on CVE Vulnerability.

]]> CVE-2018-25049 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-25049/ Sun, 26 Feb 2023 06:49:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-25049/ A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned […]

The post CVE-2018-25049 appeared first on CVE Vulnerability.

]]> A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability.

The post CVE-2018-25049 appeared first on CVE Vulnerability.

]]> CVE-2020-36661 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-36661/ Sun, 26 Feb 2023 06:41:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-36661/ A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function is_header of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this issue. The name of the patch is d632e5df43a2928fd537784a99a79dec288bf01b. It is recommended to upgrade the […]

The post CVE-2020-36661 appeared first on CVE Vulnerability.

]]> A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function is_header of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this issue. The name of the patch is d632e5df43a2928fd537784a99a79dec288bf01b. It is recommended to upgrade the affected component. VDB-220642 is the identifier assigned to this vulnerability.

The post CVE-2020-36661 appeared first on CVE Vulnerability.

]]> CVE-2020-36649 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-36649/ Sun, 26 Feb 2023 06:41:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-36649/ A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file papaparse.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 5.2.0 is able to address this issue. The name of the patch is 235a12758cd77266d2e98fd715f53536b34ad621. It is recommended to upgrade […]

The post CVE-2020-36649 appeared first on CVE Vulnerability.

]]> A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file papaparse.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 5.2.0 is able to address this issue. The name of the patch is 235a12758cd77266d2e98fd715f53536b34ad621. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218004.

The post CVE-2020-36649 appeared first on CVE Vulnerability.

]]> CVE-2020-26302 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-26302/ Sun, 26 Feb 2023 06:40:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-26302/ is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop “forever.” This vulnerability was found using […]

The post CVE-2020-26302 appeared first on CVE Vulnerability.

]]> is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop “forever.” This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is.js has no patch for this issue.

The post CVE-2020-26302 appeared first on CVE Vulnerability.

]]> CVE-2019-6785 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6785/ Sun, 26 Feb 2023 06:34:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6785/ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Denial of Service. Inputting an overly long string into a Markdown field could cause a denial of service.

The post CVE-2019-6785 appeared first on CVE Vulnerability.

]]> An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Denial of Service. Inputting an overly long string into a Markdown field could cause a denial of service.

The post CVE-2019-6785 appeared first on CVE Vulnerability.

]]> CVE-2019-25102 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-25102/ Sun, 26 Feb 2023 06:32:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-25102/ A vulnerability, which was classified as problematic, was found in simple-markdown 0.6.0. Affected is an unknown function of the file simple-markdown.js. The manipulation with the input <<<<<<<<<<:/:/:/:/:/:/:/:/:/:/ leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to […]

The post CVE-2019-25102 appeared first on CVE Vulnerability.

]]> A vulnerability, which was classified as problematic, was found in simple-markdown 0.6.0. Affected is an unknown function of the file simple-markdown.js. The manipulation with the input <<<<<<<<<<:/:/:/:/:/:/:/:/:/:/ leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.6.1 is able to address this issue. The name of the patch is 015a719bf5cdc561feea05500ecb3274ef609cd2. It is recommended to upgrade the affected component. VDB-220638 is the identifier assigned to this vulnerability.

The post CVE-2019-25102 appeared first on CVE Vulnerability.

]]>