ON
Product
Oniguruma
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 5Medium 1Low 0
Watch
Add Oniguruma to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-19246 | 7.5 | Nov 25 | Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c Affected: through 6.9.3 |
| CVE-2019-19204 | 7.5 | Nov 21 | An issue was discovered in Oniguruma 6.x before 6.9.4_rc2 Affected: 6.0.0 before 6.9.4; 6.9.4 |
| CVE-2019-19203 | 7.5 | Nov 21 | An issue was discovered in Oniguruma 6.x before 6.9.4_rc2 Affected: 6.0.0 before 6.9.4; 6.9.4 |
| CVE-2019-16163 | 7.5 | Sep 9 | Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c Affected: before 6.9.3 |
| CVE-2017-9229 | 7.5 | May 24 | An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5 Affected: 6.2.0 |
Showing 5