Lucene search
+L

1255 matches found

CNNVD
CNNVD
added 2023/08/11 12:0 a.m.6 views

JerryScript Code Issues Vulnerabilities

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 2.3.0, which originated from a vulnerability that allows a local attacker to cause a denial of service DoS via ecma-helpers.c. The vulnerability is caused by the use...

5.5CVSS6.4AI score0.00303EPSS
SaveExploits1References3
CVE
CVE
added 2023/08/11 12:0 a.m.47 views

CVE-2020-24187

JerryScript CVE-2020-24187 affects ecma-helpers.c in jerryscript 2.3.0. The issue allows a local attacker to trigger a denial of service via a Null Pointer Dereference. Documented impact is local DoS; no patch/version remediation details are provided across the connected sources.

5.5CVSS5.3AI score0.00303EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/11 12:0 a.m.6 views

PT-2023-11663 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: jerryscript version 2.3.0 Description: An issue in ecma-helpers.c allows local attackers to cause a denial of service DoS due to a Null Pointer Dereference. This issue enables local attackers to potentially disrupt service availability...

5.5CVSS5.2AI score0.00303EPSS
SaveExploits1References8
ATTACKERKB
ATTACKERKB
added 2023/07/07 4:15 p.m.10 views

CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

7.5CVSS7.1AI score0.00609EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/07 4:15 p.m.25 views

Design/Logic Flaw

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

5CVSS7.1AI score0.00609EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/07/07 4:15 p.m.38 views

UBUNTU-CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

7.5CVSS5.8AI score0.00609EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/07 12:0 a.m.5 views

PT-2023-25479 · Jerryscriptproject · Jerryscript

Name of the Vulnerable Software and Affected Versions: JerryscriptProject jerryscript version 3.0.0 Description: An issue in JerryscriptProject jerryscript allows an attacker to obtain sensitive information via a crafted script to the arrays. Recommendations: For version 3.0.0, consider restricti...

7.5CVSS6.6AI score0.00609EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2023/07/07 12:0 a.m.7 views

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript Project. A security vulnerability exists in JerryscriptProject jerryscript version v.3.0.0. An attacker exploited the vulnerability to obtain sensitive information via a specially crafted array script...

7.5CVSS7.3AI score0.00609EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/07 12:0 a.m.11 views

CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

7.2AI score0.00609EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/07 12:0 a.m.139 views

CVE-2023-36201

CVE-2023-36201 affects JerryscriptProject jerryscript v3.0.0. A crafted script targeting arrays can cause leakage of sensitive information. Root cause details are not fully specified in the provided sources, and there is no patch/fix information in the supplied documents. Exploitation status is n...

7.5CVSS7.1AI score0.00609EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/07 12:0 a.m.34 views

CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

7.3AI score0.00609EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2023/07/07 12:0 a.m.69 views

CVE-2023-36201

Removed by vendor...

7.5CVSS7.5AI score0.00609EPSS
SaveExploits0
OSV
OSV
added 2023/07/07 12:0 a.m.11 views

CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

6AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2023/07/03 9:15 p.m.23 views

CVE-2020-22597

An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary code via the ecmabuiltinarrayprototypeobjectslice parameter...

9.8CVSS7.5AI score0.01314EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/03 9:15 p.m.10 views

UBUNTU-CVE-2020-22597

An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary code via the ecmabuiltinarrayprototypeobjectslice parameter...

9.8CVSS6.2AI score0.01314EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/07/03 12:0 a.m.12 views

PT-2023-11623 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscrip version 2.3.0 Description: An issue in the Jerryscrip project allows a remote attacker to execute arbitrary code via the ecma builtin array prototype object slice parameter. Recommendations: For Jerryscrip version 2.3.0, consider...

9.8CVSS9.7AI score0.01314EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/07/03 12:0 a.m.11 views

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 2.3.0 that originated from allowing an attacker to execute arbitrary code via the ecmabuiltinarrayprototypeobjectslice parameter...

9.8CVSS8.9AI score0.01314EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/07/03 12:0 a.m.11 views

CVE-2020-22597

An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary code via the ecmabuiltinarrayprototypeobjectslice parameter...

7.8AI score0.01314EPSS
SaveExploits1References1
NVD
NVD
added 2023/06/14 4:15 p.m.44 views

CVE-2023-34868

Jerryscript 3.0 commit 05dbbd1 was discovered to contain an Assertion Failure via the parserparseforstatementstart at jerry-core/parser/js/js-parser-statm.c...

7.5CVSS7.5AI score0.00732EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/06/14 4:15 p.m.4 views

CVE-2023-34868

Jerryscript 3.0 commit 05dbbd1 was discovered to contain an Assertion Failure via the parserparseforstatementstart at jerry-core/parser/js/js-parser-statm.c...

7.5CVSS5.8AI score0.00732EPSS
SaveExploits1References2
Rows per page
Query Builder