1346 matches found
CVE-2020-13622
JerryScript 2.2.0 allows attackers to cause a denial of service assertion failure because a property key query for a Proxy object returns unintended data...
CVE-2020-13623
JerryScript 2.2.0 allows attackers to cause a denial of service stack consumption via a proxy operation...
CVE-2020-13622
JerryScript 2.2.0 allows attackers to cause a denial of service assertion failure because a property key query for a Proxy object returns unintended data...
Design/Logic Flaw
JerryScript 2.2.0 allows attackers to cause a denial of service assertion failure because a property key query for a Proxy object returns unintended data...
Design/Logic Flaw
JerryScript 2.2.0 allows attackers to cause a denial of service stack consumption via a proxy operation...
CVE-2020-13623
JerryScript 2.2.0 allows attackers to cause a denial of service stack consumption via a proxy operation...
CVE-2020-13623
CVE-2020-13623 affects JerryScript 2.2.0. An attacker can cause a denial of service (stack consumption) via a proxy operation. The issue is documented across multiple feeds (NVD, Red Hat, Ubuntu, OSV, etc.). Exploitation details are not provided in the initial or connected documents, and remediat...
Zephyr Input Validation Error Vulnerability (CNVD-2020-35003)
Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. An input validation error vulnerability exists in the Kscan subsystem in Zephyr 2.1.0 and later fixed in version 2.2.0, which stems from the program failing to perform sufficient parameter validation...
CVE-2020-10060
In updatehubprobe, right after JSON parsing is complete, objects\1 is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an...
Design/Logic Flaw
In updatehubprobe, right after JSON parsing is complete, objects\1 is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an...
Remote Code Execution
openjpeg is vulnerable to remote code execution. The vulnerability exists as a size-validation issue was discovered in opjj2kwritesot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow...
Library CMS Powerful Book Management System 2.2.0 - Session Fixation
Exploit Title: Library CMS Powerful Book Management System 2.2.0 - Session Fixation Date: 2020-04-22 Exploit Author: Ismail Tasdelen Vendor Homepage: https://kaasoft.pro/ Software : https://codecanyon.net/item/library-cms-powerful-book-management-system/21105281 Product Version: v2.2.0 Product :...
PT-2020-12443 · Western Digital · Western Digital My Cloud Home +1
Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Home and ibi devices versions prior to 2.2.0 Description: The issue allows clickjacking on sign-in pages. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue...
GNU IDN Library 2: Multiple vulnerabilities
Background GNU IDN Library 2 is an implementation of the IDNA2008 + TR46 specifications RFC 5890, RFC 5891, RFC 5892, RFC 5893, TR 46. Description Multiple vulnerabilities have been discovered in GNU IDN Library 2. Please review the CVE identifiers referenced below for details. Impact A remote...
CVE-2019-10801
enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" function without any sanitization...
CVE-2019-15609
The kill-port-process package version 2.2.0 is vulnerable to a Command Injection vulnerability...
Western Digital My Cloud Cross-Site Scripting Vulnerability
Western Digital My Cloud is a personal cloud storage device from Western Digital. A cross-site scripting vulnerability exists in Western Digital mycloud.com Web version versions prior to 2.2.0-134. The vulnerability stems from the WEB application lacking proper validation of client data. An...
CVE-2020-8960
Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS...