CVE-2021-46339

CVE-2021-46339 affects JerryScript 3.0.0. The vulnerability arises from an assertion failure in ecma-helpers-string.c (lit_is_valid_cesu8_string) when creating a string from UTF-8, which can lead to denial of service according to CNVD/NVD references. Connected documents identify the affected comp...

CVE-2021-46338

There is an Assertion 'ecmaislexicalenvironment objectp' failed at /base/ecma-helpers.cecmagetlexenvtype in JerryScript 3.0.0...

CVE-2021-46338

CVE-2021-46338 relates to JerryScript 3.0.0. The documented root cause is an assertion failure: ecma_is_lexical_environment(object_p) at ecma_get_lex_env_type in /base/ecma-helpers.c. Consequence described is an assertion failure in JerryScript 3.0.0. The connected documents do not provide a spec...

CVE-2021-46336

There is an Assertion 'opts & PARSERCLASSLITERALCTORPRESENT' failed at /parser/js/js-parser-expr.cparserparseclassbody in JerryScript 3.0.0...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from an assertion failure in /jerry-core/parser/js/js-scanner-util.c. An attacker could use this vulnerability to launch a denial of service...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which originates in /jerry-core/ecma/builtin-objects/ecma-builtin-date- prototype.c has an assertion failure, and an attacker could use this vulnerability to launch a...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/operations/ecma-objects.c , an attacker could use this vulnerability to launch a denial of service...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-helpers-value.c , an attacker could use this vulnerability to launch a denial of service...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine for the JerryScript Jerryscript project. version 3.0.0 of JerryScript has a security vulnerability, there are no details of the vulnerability provided...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-literal-storage.c. case, an attacker could use this vulnerability to launch a denial of service...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-helpers.c. An attacker could exploit this vulnerability to launch a denial of service...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial-of-service vulnerability in version 3.0.0, which stems from an assertion failure in /parser/js/js-parser-mem.c. An attacker could use this vulnerability to launch a denial of service...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in JerryScript 3.0.0, which stems from /parser/js/js-scanner.cscannerscan statementend has an assertion contextp-stacktopuint8 == SCANSTACKTRYSTATEMENT || contextp-stacktopuint8 ==...

Security Bulletin: Crypto Hardware Initialization and Maintenance is vulnerable to denial of service and arbitrary code execution due to Apache Log4j (CVE-2021-45105, CVE-2021-45046)

Summary Crypto Hardware Initialization and Maintenance CHIM 3.0.0 as shipped with CCA 7.2.55 for MTM 4769 is affected by several vulnerabilities in Apache Log4j CVE-2021-45105 and CVE-2021-45046. CHIM is using Apache Log4j for internal logging purposes of regular user activity. The fix includes...

CVE-2021-46020

An untrusted pointer dereference in mrbvmexec of mruby v3.0.0 can lead to a segmentation fault or application crash...

DEBIAN-CVE-2021-46020

An untrusted pointer dereference in mrbvmexec of mruby v3.0.0 can lead to a segmentation fault or application crash...

mruby缓冲区错误漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby, which stems from an untrusted pointer dereference in mrbvmexec in mruby v3.0.0 that could lead to a segmentation error or application crash. No detailed vulnerability details are currently...

Security Bulletin: Vulnerability in Apache Log4J adressed in Crypto Hardware Initialization and Maintenance (CVE-2021-44228)

Summary Crypto Hardware Initialization and Maintenance CHIM 3.0.0 as shipped with CCA 7.2.55 for MTM 4769 is affected by a vulnerability in Apache Log4J CVE-2021-44228. CHIM is using Apache Log4J for internal logging purposes of regular user activity. Vulnerability Details CVEID: CVE-2021-44228...

CVE-2021-3584

A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability o...

PT-2021-6876 · Openssl · Openssl

Name of the Vulnerable Software and Affected Versions: OpenSSL version 3.0.0 OpenSSL versions prior to 3.0.1 Description: The issue is related to the mishandling of internal errors by the X509 verify cert function in OpenSSL. This function may return a negative value to indicate an internal error...