CWE-1333

457 vulnerabilities with CWE-1333

CVE-2023-22467 HIGH

Luxon 1.x < 1.38.1, 2.x < 2.5.2, 3.2.1 - Denial of Service via RFC2822 Date Parsing

CVSS 7.5

CVE-2022-25883 MEDIUM

npmjs/semver <5.7.2 and >=7.0.0 <7.5.2 - Regular Expression Denial of Service via Range Function

CVSS 5.3

CVE-2022-44572 HIGH

Rack < 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1 - Denial of Service via Multipart Boundary Parsing

CVSS 7.5

CVE-2022-44571 HIGH

Rack 2.0.0-2.0.9.1 - Denial of Service via Content-Disposition Header Parsing

CVSS 7.5

CVE-2022-44570 HIGH

Rack 1.5.0-2.0.9.1 - Denial of Service via Range Header Parsing

CVSS 7.5

CVE-2022-25881 MEDIUM

http-cache-semantics <4.1.1 - Info Disclosure

CVSS 5.3

CVE-2022-25927 MEDIUM

ua-parser-js 0.7.30-0.7.32 and 0.8.1-1.0.32 - Regular Expression Denial of Service via trim() Function

CVSS 5.3

CVE-2022-25901 MEDIUM

cookiejar < 2.1.4 - Denial of Service via Insecure Regular Expression in Cookie.parse

CVSS 5.3

CVE-2022-4891 LOW

Sisimai <4.25.14p11 - Info Disclosure

CVSS 3.5

CVE-2022-4131 MEDIUM

GitLab 10.8.0-15.5.6, 15.6.0-15.6.3, 15.7.0-15.7.1 - Denial of Service via User Agent Regex Parsing

CVSS 4.3

CVE-2022-3514 MEDIUM

GitLab CE/EE <15.5.7-15.6.4-15.7.2 - DoS

CVSS 4.3

CVE-2022-23548 MEDIUM

Discourse < 2.8.14 - Regular Expression Denial of Service

CVSS 6.5

CVE-2022-40897 MEDIUM

Python Packaging Authority (PyPA) setuptools <65.5.1 - DoS

CVSS 5.9

CVE-2022-23517 HIGH

rails-html-sanitizer < 1.4.4 - Denial of Service via Inefficient SVG Attribute Regex

CVSS 7.5

CVE-2022-23514 HIGH

Loofah < 2.19.1 - Denial of Service via Inefficient SVG Attribute Regular Expression

CVSS 7.5

CVE-2022-30122 HIGH

Rack <2.0.9.1, <2.1.4.1, <2.2.3.1 - Denial of Service in Multipart Parsing

CVSS 7.5

CVE-2022-42124 HIGH

Liferay Portal 7.3.2-7.4.3.4 & DXP 7.2 FP9-18, 7.3 < U4, 7.4 GA - ReDoS in LayoutPageTemplateEntryUpgradeProcess

CVSS 7.5

CVE-2022-42966 MEDIUM

cleo < 2.0.0 - Regular Expression Denial of Service via Table.set_rows Method

CVSS 5.9

CVE-2022-42965 LOW

snowflake-connector-python < 2.8.2 - Regular Expression Denial of Service via get_file_transfer_type

CVSS 3.7

CVE-2022-42964 MEDIUM

pymatgen - Denial of Service via GaussianInput.from_string ReDoS

CVSS 5.9

CVE-2022-37620 HIGH

html-minifier-terser < 7.2.0 - Denial of Service via reCustomIgnore Regular Expression

CVSS 7.5

CVE-2022-25918 MEDIUM

shescape >=1.5.10 <1.6.1 - Regular Expression Denial of Service via escapeArgBash Function

CVSS 5.3

CVE-2022-3517 HIGH

minimatch < 3.0.5 - Denial of Service via braceExpand Function

CVSS 7.5

CVE-2022-2908 MEDIUM

GitLab 10.7-15.1.4, 15.2-15.2.2, 15.3 - Denial of Service via Commit Message Field

CVSS 4.3

CVE-2022-42969 MEDIUM

PY < 1.11.0 - Denial of Service

CVSS 5.3