23 results · Feed
-
Unscored —
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than o…
-
Unscored —
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
-
Unscored —
The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a…
-
Unscored —
The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a d…
-
Unscored —
In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursi…
-
Unscored —
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of serv…
-
Unscored —
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation vio…
-
Unscored —
The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP…
-
Unscored —
Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attacke…
-
Unscored —
The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishand…
-
Unscored —
PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal recursive ba…
-
Unscored —
PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows rem…
-
Unscored —
PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, wh…
-
Unscored —
PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing paren…
-
Unscored —
The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remot…
-
Unscored —
The match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcd…
-
Unscored —
The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote atta…
-
Unscored —
PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to caus…
-
Unscored —
pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain se…
-
Unscored —
PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a den…
-
Unscored —
PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a den…
-
Unscored —
PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows r…
-
Unscored —
Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or hav…