Jsish 安全漏洞

Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v3.5.0 that could lead to a Denial of Service DoS...

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...

Jsish 安全漏洞

Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...

CVE-2021-46343

There is an Assertion 'contextp-token.type == LEXERLITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial of service vulnerability in version 3.0.0, which stems from an assertion failure in /jerry-core/parser/js/js-parser-expr.c. An attacker could use this vulnerability to launch a denial of service...

PT-2022-15718

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description The issue is related to an assertion failure in the js-scanner-util.c file of Jerryscript. The assertion arguments type != SCANNER ARGUMENTS PRESENT && arguments type != SCANNER ARGUMENTS PRESENT NO REG...

The vulnerability in the `parser_parse_expression` function of the `js-parser-expr.c` component of the JavaScript engine for Internet of Things technology, JerryScript, and the IoT.js platform, related to the insufficient use of the `assert()` function, allows a malicious actor to trigger a service failure.

The vulnerability of the parserparseexpression function in the js-parser-expr.c component of the JavaScript engine for Internet of Things technology, JerryScript, and the IoT.js platform is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicio...

Session fixation

There is an Assertion 'contextp-nextscannerinfop-type == SCANNERTYPEFUNCTION' failed at js-parser-statm.c:733 in parserparsefunctionstatement in JerryScript 2.2.0...

UBUNTU-CVE-2020-23308

There is an Assertion 'contextp-stacktopuint8 == LEXEREXPRESSIONSTART' at js-parser-expr.c:3565 in parserparseexpression in JerryScript 2.2.0...

CVE-2020-23312

There is an Assertion 'context.statusflags & PARSERSCANNINGSUCCESSFUL' failed at js-parser.c:2185 in parserparsesource in JerryScript 2.2.0...

Authorization Bypass

firefox is vulnerable to authorization bypass. The vulnerability exists in the JavaScript parser, where a cast of an integer to a narrower type can result in data read from outside the buffer being parsed...

CVE-2017-7813

Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This...

CVE-2017-7813: Out-of-bounds Read

Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This...

CVE-2017-7813

Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This...

Mozilla Firefox JavaScript Parser Denial of Service Vulnerability

Mozilla Firefox is the United States Mozilla Foundation developed an open source Web browser . JavaScript parser is one of the JavaScript parser . A security vulnerability exists in the JavaScript parser in versions of Mozilla Firefox prior to 56. A remote attacker could exploit this vulnerabilit...

Security vulnerabilities fixed in Firefox 56 — Mozilla

A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake addre...

Microsoft Edge: Chakra: Uninitialized arguments(CVE-2017-8640)

Here's a snippet of "ParseVariableDeclaration" which is used for parsing declarations. template ParseNodePtr Parser::ParseVariableDeclaration tokens declarationType, charcountt ichMin, BOOL fAllowIn/ = TRUE/, BOOL pfForInOk/ = nullptr/, BOOL singleDefOnly/ = FALSE/, BOOL allowInit/ = TRUE/, BOOL...

PT-2017-4023

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 56 Description The issue is related to a JavaScript parser vulnerability in Mozilla Firefox, which involves reading data beyond buffer boundaries in memory. This can potentially allow a remote attacker to gain...

Debian DLA-69-1 : exuberant-ctags security update

Stefano Zacchiroli discovered that certain JavaScript input files cause ctags to enter an infinite loop until it runs out of disk space. This update fixes the JavaScript parser. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory...

[SECURITY] [DLA 69-1] exuberant-ctags security update

Package : exuberant-ctags Version : 1:5.8-3squeeze2 CVE ID : CVE-2014-7204 Debian Bug : 742605 Stefano Zacchiroli discovered that certain JavaScript input files cause ctags to enter an infinite loop until it runs out of disk space. This update fixes the JavaScript parser...