52 matches found
Session fixation
There is an Assertion 'contextp-nextscannerinfop-type == SCANNERTYPEFUNCTION' failed at js-parser-statm.c:733 in parserparsefunctionstatement in JerryScript 2.2.0...
UBUNTU-CVE-2020-23308
There is an Assertion 'contextp-stacktopuint8 == LEXEREXPRESSIONSTART' at js-parser-expr.c:3565 in parserparseexpression in JerryScript 2.2.0...
CVE-2020-23312
There is an Assertion 'context.statusflags & PARSERSCANNINGSUCCESSFUL' failed at js-parser.c:2185 in parserparsesource in JerryScript 2.2.0...
Authorization Bypass
firefox is vulnerable to authorization bypass. The vulnerability exists in the JavaScript parser, where a cast of an integer to a narrower type can result in data read from outside the buffer being parsed...
CVE-2017-7813
Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This...
CVE-2017-7813
Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This...
Mozilla Firefox JavaScript Parser Denial of Service Vulnerability
Mozilla Firefox is the United States Mozilla Foundation developed an open source Web browser . JavaScript parser is one of the JavaScript parser . A security vulnerability exists in the JavaScript parser in versions of Mozilla Firefox prior to 56. A remote attacker could exploit this vulnerabilit...
Security vulnerabilities fixed in Firefox 56 — Mozilla
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake addre...
Microsoft Edge: Chakra: Uninitialized arguments(CVE-2017-8640)
Here's a snippet of "ParseVariableDeclaration" which is used for parsing declarations. template ParseNodePtr Parser::ParseVariableDeclaration tokens declarationType, charcountt ichMin, BOOL fAllowIn/ = TRUE/, BOOL pfForInOk/ = nullptr/, BOOL singleDefOnly/ = FALSE/, BOOL allowInit/ = TRUE/, BOOL...
Debian DLA-69-1 : exuberant-ctags security update
Stefano Zacchiroli discovered that certain JavaScript input files cause ctags to enter an infinite loop until it runs out of disk space. This update fixes the JavaScript parser. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory...
[SECURITY] [DLA 69-1] exuberant-ctags security update
Package : exuberant-ctags Version : 1:5.8-3squeeze2 CVE ID : CVE-2014-7204 Debian Bug : 742605 Stefano Zacchiroli discovered that certain JavaScript input files cause ctags to enter an infinite loop until it runs out of disk space. This update fixes the JavaScript parser...