Skip to content
Noroxi

PCRE records

64 published records for vendor pcre.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
12
With a fix record
98.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 19
  4. 20
  5. 22
  6. 23
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

64 records
  • CVE-2015-3210
    42Plan

    Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular

    CriticalCVSS 9.8No exploitEPSS 9%

    pcre · pcre2Dec 13, 2016

  • CVE-2016-3191
    42Plan

    The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containi

    CriticalCVSS 9.8No exploitEPSS 8%

    pcre · pcreMar 17, 2016

  • CVE-2016-1283
    41Plan

    The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J

    CriticalCVSS 9.8No exploitEPSS 7%

    pcre · pcreJan 2, 2016

  • CVE-2015-8386
    41Plan

    PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to ca

    CriticalCVSS 9.8No exploitEPSS 6%

    pcre · perl compatible regular expression libraryDec 1, 2015

  • CVE-2015-8391
    41Plan

    The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a deni

    CriticalCVSS 9.8No exploitEPSS 6%

    pcre · pcreDec 1, 2015

  • CVE-2015-8383
    41Plan

    PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow

    CriticalCVSS 9.8No exploitEPSS 6%

    pcre · perl compatible regular expression libraryDec 1, 2015

  • CVE-2015-8394
    40Plan

    PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integ

    CriticalCVSS 9.8No exploitEPSS 4%

    pcre · perl compatible regular expression libraryDec 1, 2015

  • CVE-2015-8390
    40Plan

    PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (unini

    CriticalCVSS 9.8No exploitEPSS 4%

    pcre · perl compatible regular expression libraryDec 1, 2015

  • CVE-2017-8786
    40Plan

    pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified ot

    CriticalCVSS 9.8No exploitEPSS 4%

    pcre · pcre2May 4, 2017

  • CVE-2015-8389
    40Plan

    PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (in

    CriticalCVSS 9.8No exploitEPSS 3%

    pcre · perl compatible regular expression libraryDec 1, 2015

  • CVE-2017-8399
    40Plan

    PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many

    CriticalCVSS 9.8No exploitEPSS 3%

    pcre · pcre2May 1, 2017

  • CVE-2015-5073
    38Monitor

    Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial

    CriticalCVSS 9.1No exploitEPSS 7%

    pcre · pcreDec 13, 2016

  • CVE-2022-1586
    37Monitor

    An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compi

    CriticalCVSS 9.1No exploitEPSS 3%

    pcre · pcre2May 16, 2022

  • CVE-2022-1587
    37Monitor

    An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c

    CriticalCVSS 9.1No exploitEPSS 2%

    pcre · pcre2May 16, 2022

  • CVE-2008-2371
    32Monitor

    Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers

    HighCVSS 7.5No exploitEPSS 6%

    pcre · pcreJul 7, 2008

  • CVE-2015-8388
    32Monitor

    PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows

    HighCVSS 7.5No exploitEPSS 6%

    pcre · perl compatible regular expression libraryDec 1, 2015

  • CVE-2015-3217
    32Monitor

    PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of servi

    HighCVSS 7.5No exploitEPSS 6%

    pcre · pcre2Dec 13, 2016

  • CVE-2008-0674
    32Monitor

    Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class w

    HighCVSS 7.5No exploitEPSS 5%

    pcre · pcreFeb 18, 2008

  • CVE-2015-8385
    32Monitor

    PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote att

    HighCVSS 7.5No exploitEPSS 5%

    pcre · perl compatible regular expression libraryDec 1, 2015

  • CVE-2015-8381
    32Monitor

    The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R'

    HighCVSS 7.5No exploitEPSS 5%

    pcre · perl compatible regular expression libraryDec 1, 2015

  • CVE-2015-2328
    32Monitor

    PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to caus

    HighCVSS 7.5No exploitEPSS 5%

    pcre · pcreDec 1, 2015

  • CVE-2017-7186
    32Monitor

    libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read acces

    HighCVSS 7.5No exploitEPSS 5%

    pcre · pcreMar 19, 2017

  • CVE-2017-7246
    32Monitor

    Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a

    HighCVSS 7.8No exploitEPSS 2%

    pcre · pcreMar 23, 2017

  • CVE-2017-7245
    32Monitor

    Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a

    HighCVSS 7.8No exploitEPSS 2%

    pcre · pcreMar 23, 2017

  • CVE-2017-6004
    31Monitor

    The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled versio

    HighCVSS 7.5No exploitEPSS 4%

    pcre · pcreFeb 16, 2017