7367 matches found
PT-2020-6413
Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to the parser parse source function in the js-parser.c component of the JerryScript JavaScript engine for Internet of Things IoT devices. It involves an assertion failure, specifically...
PT-2020-6410
Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to an incorrect comparison in the parser parse statements function of the js-parser-statm.c component in the JerryScript JavaScript engine for the Internet of Things. This could...
PT-2020-6409
Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to the parser parse expression function in the js-parser-expr.c component of the JerryScript JavaScript engine for Internet of Things IoT devices. It is caused by insufficient use of t...
CVE-2020-13649
parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer dereference and a scannerscanall assertion failure...
CVE-2020-13649
parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer dereference and a scannerscanall assertion failure...
PT-2020-13636
Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue arises from the mishandling of errors during certain out-of-memory conditions in the parser/js/js-scanner.c file. This can lead to a scanner reverse info list NULL pointer dereference and a scann...
CVE-2020-13649: NULL Pointer Dereference
parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer dereference and a scannerscanall assertion failure...
CVE-2020-6830
For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...
CVE-2020-6830
For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...
Code injection
For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...
CVE-2020-6830
For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...
Denial Of Service (DoS)
jpeg-js is vulnerable to denial of service DoS. The vulnerability exists as it fails to properly restrict the values of the resolution from the EXIF data, allowing a small manipulated image to cause a disproportionately large memory allocation...
PT-2020-5579
Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 25 Description The issue is related to the implementation of window.webkit in the Firefox web browser for iOS, which involves the disclosure of information about the SECURITY TOKEN. This could allow a remote...
CVE-2020-6830: Exposure of Sensitive Information to an Unauthorized Actor
For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...
CVE-2020-8020
A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attackers to store arbitrary JS code to cause XSS. This issue affects: openSUSE open-build-service versions prior to 7cc32c8e2ff7290698e101d9a80a9dc29a5500fb...
CVE-2020-8020: Improper Neutralization of Input During Web Page Generation
A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attackers to store arbitrary JS code to cause XSS. This issue affects: openSUSE open-build-service versions prior to 7cc32c8e2ff7290698e101d9a80a9dc29a5500fb...
Denial Of Service (DoS)
js-quantities is vulnerable to denial of service DoS attacks through out-of-memoryOOM.The vulnerability exists due to the function parse in quantities.js which does not properly handle unsanitized user inputs.An attacker can exploit this flaw by inserting evil input strings, leading to an...
DuckDuckGo: DOM XSS on duckduckgo.com search
Hello, The is a DOM XSS vulnerability on https://duckduckgo.com search through the norw parameter. PoC URL: https://duckduckgo.com/?q=a&norw=" Screenshot: F820482 Impact The attacker can execute JS code...
