Login Request a demo
ON
Product
Oniguruma
by Oniguruma Project · last CVE Nov 25, 2019
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 7High 5Medium 1Low 0
Severity
All severities13Critical7High5Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Oniguruma to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-19012
9.8
11%
Nov 17
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the…
Affected: 6.0.0 through 6.9.3; 6.9.4
CVE-2019-13224
9.8
4%
Jul 10
A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by…
Affected: 6.9.2
CVE-2017-9228
9.8
6%
May 24
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5
Affected: 6.2.0
CVE-2017-9227
9.8
6%
May 24
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5
Affected: 6.2.0
CVE-2017-9226
9.8
8%
May 24
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5
Affected: 6.2.0
CVE-2017-9225
9.8
3%
May 24
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5
Affected: 6.2.0
CVE-2017-9224
9.8
7%
May 24
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5
Affected: 6.2.0
CVE-2019-19246
7.5
3%
Nov 25
Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c
Affected: through 6.9.3
CVE-2019-19204
7.5
7%
Nov 21
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2
Affected: 6.0.0 before 6.9.4; 6.9.4
CVE-2019-19203
7.5
4%
Nov 21
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2
Affected: 6.0.0 before 6.9.4; 6.9.4
CVE-2019-16163
7.5
3%
Sep 9
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c
Affected: before 6.9.3
CVE-2017-9229
7.5
5%
May 24
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5
Affected: 6.2.0
CVE-2019-13225
6.5
2%
Jul 10
A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression
Affected: 6.9.2
Showing 13