https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:50:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-02889 bdu:2021-02889 https://cve.radiocsirt.org/vuln/bdu:2021-02889 https://cve.radiocsirt.org/vuln/certfr-2022-avi-494 certfr-2022-avi-494 https://cve.radiocsirt.org/vuln/certfr-2022-avi-494 https://cve.radiocsirt.org/vuln/euvd-2026-25495 EUVD-2026-25495 https://cve.radiocsirt.org/vuln/euvd-2026-25495 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27292 <p>ua-parser-js &gt;= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.</p> <p>ua-parser-js &gt;= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-27292 https://cve.radiocsirt.org/vuln/ghsa-78cj-fxph-m83p <p><strong>Affected:</strong> npm: ua-parser-js</p> <p>ua-parser-js &gt;= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.</p> <p><strong>Affected:</strong> npm: ua-parser-js</p> <p>ua-parser-js &gt;= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.</p> https://cve.radiocsirt.org/vuln/ghsa-78cj-fxph-m83p https://cve.radiocsirt.org/vuln/gsd-2021-27292 gsd-2021-27292 https://cve.radiocsirt.org/vuln/gsd-2021-27292 https://cve.radiocsirt.org/vuln/rhsa-2021:2438 <p>SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) nodejs-y18n: prototype pollution vulnerability etcd: Large slice causes panic in decodeRecord method etcd: DoS in wal/wal.go etcd: directories created via os.MkdirAll are not checked for permissions etcd: gateway can include itself as an endpoint resulting in resource exhaustion and leads to DoS etcd: no authentication is performed against endpoints provided in the --endpoints flag jwt-go: access restriction bypass vulnerability nodejs-glob-parent: Regular expression denial of service nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag golang: crypto/elliptic: incorrect operations on the P-224 curve gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation containernetworking-cni: Arbitrary path injection via type field in CNI configuration fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise containers/storage: DoS via malicious image go.elastic.co/apm: leaks sensitive HTTP headers during panic nodejs-lodash: command injection via template nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl() nodejs-postcss: Regular expression denial of service during source map parsing nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js sanitize-html: improper handling of internationali…</p> <p>SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) nodejs-y18n: prototype pollution vulnerability etcd: Large slice causes panic in decodeRecord method etcd: DoS in wal/wal.go etcd: directories created via os.MkdirAll are not checked for permissions etcd: gateway can include itself as an endpoint resulting in resource exhaustion and leads to DoS etcd: no authentication is performed against endpoints provided in the --endpoints flag jwt-go: access restriction bypass vulnerability nodejs-glob-parent: Regular expression denial of service nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag golang: crypto/elliptic: incorrect operations on the P-224 curve gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation containernetworking-cni: Arbitrary path injection via type field in CNI configuration fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise containers/storage: DoS via malicious image go.elastic.co/apm: leaks sensitive HTTP headers during panic nodejs-lodash: command injection via template nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl() nodejs-postcss: Regular expression denial of service during source map parsing nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js sanitize-html: improper handling of internationali…</p> https://cve.radiocsirt.org/vuln/rhsa-2021:2438 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-27292 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-ua-parser-js, Ubuntu:20.04:LTS: node-ua-parser-js, Ubuntu:22.04:LTS: node-ua-parser-js</p> <p>ua-parser-js &gt;= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-ua-parser-js, Ubuntu:20.04:LTS: node-ua-parser-js, Ubuntu:22.04:LTS: node-ua-parser-js</p> <p>ua-parser-js &gt;= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-27292 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1603 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Tivoli Netcool/OMNIbus ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Tivoli Netcool/OMNIbus ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1603