CVE-2020-23314

Technical details about CVE-2020-23314 are not publicly available in the provided documents. Monitor for updates for any affected products, versions, or remediation information.

CVE-2020-23313

Removed by vendor...

CVE-2020-23312

JerryScript 2.2.0 contains an assertion failure in js-parser.c:2185 (parser_parse_source) when evaluating context.status_flags & PARSER_SCANNING_SUCCESSFUL. The connected documents confirm the affected component and the exact source location but do not provide exploit details, impact beyond the a...

CVE-2020-23311

CVE-2020-23311 affects JerryScript 2.2.0. The vulnerability arises from an assertion failure in the parser_parse_object_initializer (js-parser-expr.c:3230) when processing object initializers. Public documents provide the exact assertion and file/line but do not specify an exploit, affected produ...

CVE-2020-23310

JerryScript 2.2.0 is affected by CVE-2020-23310, due to an assertion failure in parser_parse_function_statement (js-parser-statm.c:733) involving context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION. The connected sources consistently cite this CVE and specify JerryScript 2.2.0 as ...

CVE-2020-23309

There is an Assertion 'contextp-stackdepth == contextp-contextstackdepth' failed at js-parser-statm.c:2756 in parserparsestatements in JerryScript 2.2.0...

CVE-2020-23309

CVE-2020-23309 concerns JerryScript 2.2.0, where an assertion failure occurs in parser_parse_statements (js-parser-statm.c:2756) during parsing. The connected documents provide no public details on exploit vectors, impact scope, or remediation patches. Consequently, the exact vulnerability class,...

CVE-2020-23308

Removed by vendor...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in scannerliteraliscreated in js-scanner-util.c:2510 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript 2.4.0, which stems from a heap buffer overflow in lexerparsenumber in the js-lexer.c file. No details of the vulnerability are provided at this time...

JerryScript 代码问题漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsefunctionstatement in js-parser-statm.c:733 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

JerryScript 代码问题漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsestatements in js-parser-statm.c:2756 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

OSV-2021-843 Use-after-poison in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35038 Crash type: Use-after-poison READ 8 Crash state: AK::NonnullOwnPtr::operator- JS::IndexedProperties::arraylikesize JS::IndexedProperties::append...

Prototype Pollution

Overview Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution. Recommendation Avoid using js-extend as there is no current safe version of this module References - CVE - GitHub Advisory...

@cag-group/google-api-tools (0.3.1), @doodle3d/superlogin (>=0.6.2, <=0.7.0) +182 more potentially affected by CVE-2021-25945 via js-extend (1.0.1)

js-extend NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on js-extend and may be impacted: - @cag-group/google-api-tools 0.3.1 - @doodle3d/superlogin =0.6.2, =2.1.12, =1.0.2, =0.0.0, =0.0.49, =1.0.0, =4.2.0, =0.3.4, =0.1.21, =0.0.1-a,...

GHSA-MH82-55CM-6GFH Prototype pollution vulnerability in js-extend

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

Prototype pollution vulnerability in js-extend

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

Semrush: API key (api.semrush.com) leak in JS-file

The researcher found a javascript file with an API token that allowed to get internal statistics. When you access a page not found on the application, the source code of the page contains a portion of code that list a lot of javascript files. Some of these javascript files correspond to the Semru...

CVE-2020-35971

A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/systemmanage/userconfigedit.html page...

CVE-2020-35971

CVE-2020-35971 concerns a storage XSS in YzmCMS v5.8 affecting the page /admin/system_manage/user_config_edit.html . The vulnerability allows attackers to inject JavaScript/HTML, implying persistent script execution via stored payloads. The connected CNVD/CNNVD records describe a cross-site scrip...