5504 matches found
OSV-2021-863 Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35251 Crash type: Use-after-poison WRITE 8 Crash state: AK::RefPtr ::RefPtr AK::String::String JS::abstractrelation...
MGASA-2021-0246 Updated python-lxml packages fix a security vulnerability
An XSS vulnerability was discovered in python-lxml’s clean module versions before 4.6.3. When disabling the safeattrsonly and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run...
Updated python-lxml packages fix a security vulnerability
An XSS vulnerability was discovered in python-lxml’s clean module versions before 4.6.3. When disabling the safeattrsonly and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run...
Unspecified Vulnerability in JerryScript (CNVD-2021-42996)
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript version 2.2.0 in js-parser.c:2185 in parserparsesource. No details of the vulnerability are provided at this time...
CVE-2021-26195
An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...
CVE-2021-26195
An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...
CVE-2020-23308
There is an Assertion 'contextp-stacktopuint8 == LEXEREXPRESSIONSTART' at js-parser-expr.c:3565 in parserparseexpression in JerryScript 2.2.0...
CVE-2020-23310
There is an Assertion 'contextp-nextscannerinfop-type == SCANNERTYPEFUNCTION' failed at js-parser-statm.c:733 in parserparsefunctionstatement in JerryScript 2.2.0...
CVE-2020-23311
There is an Assertion 'contextp-token.type == LEXERRIGHTBRACE || contextp-token.type == LEXERASSIGN || contextp-token.type == LEXERCOMMA' failed at js-parser-expr.c:3230 in parserparseobjectinitializer in JerryScript 2.2.0...
CVE-2020-23312
There is an Assertion 'context.statusflags & PARSERSCANNINGSUCCESSFUL' failed at js-parser.c:2185 in parserparsesource in JerryScript 2.2.0...
CVE-2020-23309
There is an Assertion 'contextp-stackdepth == contextp-contextstackdepth' failed at js-parser-statm.c:2756 in parserparsestatements in JerryScript 2.2.0...
CVE-2021-26195
An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...
Heap overflow
An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...
CVE-2020-23311
There is an Assertion 'contextp-token.type == LEXERRIGHTBRACE || contextp-token.type == LEXERASSIGN || contextp-token.type == LEXERCOMMA' failed at js-parser-expr.c:3230 in parserparseobjectinitializer in JerryScript 2.2.0...
UBUNTU-CVE-2021-26195
An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...
Authentication flaw
There is an Assertion 'contextp-stackdepth == contextp-contextstackdepth' failed at js-parser-statm.c:2756 in parserparsestatements in JerryScript 2.2.0...
CVE-2021-26195
An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...
CVE-2021-26195
An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...
CVE-2021-26195
JerryScript 2.4.0 is affected by a heap-buffer-overflow in lexer_parse_number (js-lexer.c). Connected documents confirm the root cause and file, but no remediation or patch details are provided in the supplied sources.
