Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
K-takata records in CISA KEVNo K-takata vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 37
Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02068 · Published 2019-09-09 · Fix deferred CWE-476
Priority LOW 36
Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01798 · Published 2019-09-09 · Will not fix CWE-125
Open these records in search →