Most recent entries from all

certfr-2022-avi-413 — De multiples vulnérabilités ont été découvertes dans Belden Provize Basic. Elles permettent à un attaquant de provoquer…

certfr-2022-avi-413

cnvd-2021-40508

EUVD-2026-28501

fkie_cve-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

GHSA-7p7h-4mm5-852v — Uncontrolled Resource Consumption in trim-newlines

Affected: npm: trim-newlines

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the `.end()` method.

gsd-2021-33623

RHSA-2021:4618 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4 images and security updates

openssl: SM2 Decryption Buffer Overflow openssl: Read buffer overruns processing ASN.1 strings nodejs-axios: Regular expression denial of service in trim function nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name redis: Lua scripts can overflow the heap-based Lua stack redis: Integer overflow issue with Streams redis: Integer overflow bug in the ziplist data structure redis: Out of bounds read in lua debugger protocol parser redis: Denial of service via Redis Standard Protocol (RESP) request redis: Integer overflow issue with intsets helm: information disclosure vulnerability nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite nodejs-trim-newlines: ReDoS in .end() method redis: Integer overflow issue with strings

UBUNTU-CVE-2021-33623

Affected: Ubuntu:18.04:LTS: node-trim-newlines, Ubuntu:20.04:LTS: node-trim-newlines, Ubuntu:24.04:LTS: node-trim-newlines, Ubuntu:25.10: node-trim-newlines, Ubuntu:26.04:LTS: node-trim-newlines

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

WID-SEC-W-2022-0699 — Red Hat Virtualization: Mehrere Schwachstellen ermöglichen Denial of Service

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Virtualization ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.